Cosmic Ray Report

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) + 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() + start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() + start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002815878737Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002816843900Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() + start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() + start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041104871909Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041106063598Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() + _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005143211686Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005144142001Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) * 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() * start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() * start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() * start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061434372220Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061435219157Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() * start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eddcd781321896b72: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() * _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) / 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() / start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002509593209Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002510631075Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() / start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() / start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() / start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() / _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.90s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) // 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() // start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.86s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() // start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() // start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7e8e4456f9799de0: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.91s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() // start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() // _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) % 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142557952503Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142558960779Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

10 failed, 4 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() % start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053046906206Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053047850686Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() % start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() % start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155705530425Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155706412793Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() % start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() % _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153913260140Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153914148572Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) ** 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() ** start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() ** start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (34, 'Result too large')

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

1 failed, 13 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() ** start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173127700387Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173128553594Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() ** start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() ** start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^^

E       OverflowError: (34, 'Result too large')



server.py:401: OverflowError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() ** start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^^

E       OverflowError: (34, 'Result too large')



server.py:401: OverflowError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OverflowError: (34, ...

FAILED ..\test\test_api.py::test_read_watermark_route - OverflowError: (34, '...

2 failed, 12 passed, 22 warnings in 21.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() ** _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: (34, 'Result too large')

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) >> 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() >> start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() >> start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: unsupported operand type(s) for >>: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

1 failed, 13 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() >> start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003615492719Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003616408221Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() >> start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() >> start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'float' and 'float'



server.py:401: TypeError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() >> start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'float' and 'float'



server.py:401: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

2 failed, 12 passed, 22 warnings in 19.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() >> _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for >>: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 19.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) << 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e33f14556adcf53bd: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() << start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() << start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

.F.F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() << start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/login")

    def login():

        payload = request.get_json(silent=True) or {}

        email = (payload.get("email") or "").strip()

        password = payload.get("password") or ""

    

        if not email or not password:

            app.logger.warning("Missing fields in login attempt: %s", payload)

            return jsonify({"error": "email and password are required"}), 400

    

        start_db = time.time()

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        "SELECT id, email, login, hpassword FROM Users "

                        "WHERE email = :email LIMIT 1"

                    ),

                    {"email": email},

                ).first()

    

                # Constant-time comparison to prevent timing attacks

                if row:

                    is_valid = check_password_hash(row.hpassword, password)

                else:

                    # Dummy check to maintain constant time

                    is_valid = False

                    row = None

    

                if not is_valid:

                    app.logger.warning(

                        "Failed login attempt for email: %s",

                        email if email else "<empty>",

                    )

                    inc_login_failure("invalid_credentials")

                    return jsonify({"error": "invalid credentials"}), 401

    

        except Exception as e:

            app.logger.error("Database error in login: %s", e)

            inc_db_error("login_select")

            return jsonify({"error": "An error occurred"}), 503

    

>       observe_db_latency("login_select", time.time() << start_db)

                                           ^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



server.py:284: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

1 failed, 13 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() << start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() << start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



server.py:401: TypeError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() << start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



server.py:401: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

2 failed, 12 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() << _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for <<: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) | 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024108036724Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024108910263Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() | start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() | start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060406351161Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060407267731Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() | start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

..FF.....FFF.F                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/login")

    def login():

        payload = request.get_json(silent=True) or {}

        email = (payload.get("email") or "").strip()

        password = payload.get("password") or ""

    

        if not email or not password:

            app.logger.warning("Missing fields in login attempt: %s", payload)

            return jsonify({"error": "email and password are required"}), 400

    

        start_db = time.time()

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        "SELECT id, email, login, hpassword FROM Users "

                        "WHERE email = :email LIMIT 1"

                    ),

                    {"email": email},

                ).first()

    

                # Constant-time comparison to prevent timing attacks

                if row:

                    is_valid = check_password_hash(row.hpassword, password)

                else:

                    # Dummy check to maintain constant time

                    is_valid = False

                    row = None

    

                if not is_valid:

                    app.logger.warning(

                        "Failed login attempt for email: %s",

                        email if email else "<empty>",

                    )

                    inc_login_failure("invalid_credentials")

                    return jsonify({"error": "invalid credentials"}), 401

    

        except Exception as e:

            app.logger.error("Database error in login: %s", e)

            inc_db_error("login_select")

            return jsonify({"error": "An error occurred"}), 503

    

>       observe_db_latency("login_select", time.time() | start_db)

                                           ^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'float' and 'float'



server.py:284: TypeError

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5dc1d50c8fa83b5c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() | start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015934859041Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015935779550Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() | _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171318917099Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171319767067Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) & 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.....F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

5 failed, 9 passed, 22 warnings in 19.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() & start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() & start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: unsupported operand type(s) for &: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

1 failed, 13 passed, 22 warnings in 21.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() & start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/login")

    def login():

        payload = request.get_json(silent=True) or {}

        email = (payload.get("email") or "").strip()

        password = payload.get("password") or ""

    

        if not email or not password:

            app.logger.warning("Missing fields in login attempt: %s", payload)

            return jsonify({"error": "email and password are required"}), 400

    

        start_db = time.time()

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        "SELECT id, email, login, hpassword FROM Users "

                        "WHERE email = :email LIMIT 1"

                    ),

                    {"email": email},

                ).first()

    

                # Constant-time comparison to prevent timing attacks

                if row:

                    is_valid = check_password_hash(row.hpassword, password)

                else:

                    # Dummy check to maintain constant time

                    is_valid = False

                    row = None

    

                if not is_valid:

                    app.logger.warning(

                        "Failed login attempt for email: %s",

                        email if email else "<empty>",

                    )

                    inc_login_failure("invalid_credentials")

                    return jsonify({"error": "invalid credentials"}), 401

    

        except Exception as e:

            app.logger.error("Database error in login: %s", e)

            inc_db_error("login_select")

            return jsonify({"error": "An error occurred"}), 503

    

>       observe_db_latency("login_select", time.time() & start_db)

                                           ^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



server.py:284: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() & start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() & start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



server.py:401: TypeError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() & start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



server.py:401: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

2 failed, 12 passed, 22 warnings in 21.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() & _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for &: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) ^ 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -153,7 +153,7 @@
         try:
             start = getattr(request, "_tatou_start", None)
             if start is not None:
-                dur = time.time() - start
+                dur = time.time() ^ start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -226,7 +226,7 @@
                     text("SELECT id, email, login FROM Users WHERE id = :id"),
                     {"id": uid},
                 ).one()
-            observe_db_latency("create_user", time.time() - start_db)
+            observe_db_latency("create_user", time.time() ^ start_db)
         except IntegrityError:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: unsupported operand type(s) for ^: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

1 failed, 13 passed, 22 warnings in 21.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -281,7 +281,7 @@
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503
 
-        observe_db_latency("login_select", time.time() - start_db)
+        observe_db_latency("login_select", time.time() ^ start_db)
         token = _serializer().dumps(
             {"uid": int(row.id), "login": row.login, "email": row.email}
         )

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/login")

    def login():

        payload = request.get_json(silent=True) or {}

        email = (payload.get("email") or "").strip()

        password = payload.get("password") or ""

    

        if not email or not password:

            app.logger.warning("Missing fields in login attempt: %s", payload)

            return jsonify({"error": "email and password are required"}), 400

    

        start_db = time.time()

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        "SELECT id, email, login, hpassword FROM Users "

                        "WHERE email = :email LIMIT 1"

                    ),

                    {"email": email},

                ).first()

    

                # Constant-time comparison to prevent timing attacks

                if row:

                    is_valid = check_password_hash(row.hpassword, password)

                else:

                    # Dummy check to maintain constant time

                    is_valid = False

                    row = None

    

                if not is_valid:

                    app.logger.warning(

                        "Failed login attempt for email: %s",

                        email if email else "<empty>",

                    )

                    inc_login_failure("invalid_credentials")

                    return jsonify({"error": "invalid credentials"}), 401

    

        except Exception as e:

            app.logger.error("Database error in login: %s", e)

            inc_db_error("login_select")

            return jsonify({"error": "An error occurred"}), 503

    

>       observe_db_latency("login_select", time.time() ^ start_db)

                                           ^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



server.py:284: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

1 failed, 13 passed, 22 warnings in 20.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -398,7 +398,7 @@
             inc_db_error("insert_document")
             return jsonify({"error": "database error occurred"}), 503
 
-        observe_db_latency("insert_document", time.time() - start_db)
+        observe_db_latency("insert_document", time.time() ^ start_db)
         resp_data = {
             "id": int(row.id),
             "name": row.name,

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() ^ start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



server.py:401: TypeError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )

                did = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, creation, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id

                    """

                    ),

                    {"id": did},

                ).one()

        except Exception:

            stored_path.unlink(missing_ok=True)

            app.logger.error(

                "Database error inserting document path=%s user=%s",

                stored_path,

                int(g.user["id"]),

            )

            inc_db_error("insert_document")

            return jsonify({"error": "database error occurred"}), 503

    

>       observe_db_latency("insert_document", time.time() ^ start_db)

                                              ^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



server.py:401: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

2 failed, 12 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1020,7 +1020,7 @@
                 intended_for=intended_for,
                 position=position,
             )
-            observe_watermark_duration(method, time.time() - _wm_start)
+            observe_watermark_duration(method, time.time() ^ _wm_start)
             if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ^: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Add, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 + 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Add, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 + 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Add, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 + 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1cb270defc925f30: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Sub, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 - 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Sub, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 - 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Sub, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 - 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T181630941015Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T181631906023Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Div, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 / 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:360: in upload_document

    sha_hex = _sha256_file(stored_path)

              ^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:130: in _sha256_file

    for chunk in iter(lambda: f.read(1024 / 1024), b""):

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



>   for chunk in iter(lambda: f.read(1024 / 1024), b""):

                              ^^^^^^^^^^^^^^^^^^^

E   TypeError: argument should be integer or None, not 'float'



server.py:130: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:360: in upload_document

    sha_hex = _sha256_file(stored_path)

              ^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:130: in _sha256_file

    for chunk in iter(lambda: f.read(1024 / 1024), b""):

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



>   for chunk in iter(lambda: f.read(1024 / 1024), b""):

                              ^^^^^^^^^^^^^^^^^^^

E   TypeError: argument should be integer or None, not 'float'



server.py:130: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: argument ...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: argument s...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Div, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 / 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Div, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 / 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e29bb39ba4e673a94: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_FloorDiv, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 // 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_FloorDiv, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 // 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_FloorDiv, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 // 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Mod, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 % 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193251171613Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193252094837Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Mod, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 % 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Mod, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 % 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Pow, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 ** 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:360: in upload_document

    sha_hex = _sha256_file(stored_path)

              ^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:130: in _sha256_file

    for chunk in iter(lambda: f.read(1024 ** 1024), b""):

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



>   for chunk in iter(lambda: f.read(1024 ** 1024), b""):

                              ^^^^^^^^^^^^^^^^^^^^

E   OverflowError: cannot fit 'int' into an index-sized integer



server.py:130: OverflowError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:360: in upload_document

    sha_hex = _sha256_file(stored_path)

              ^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:130: in _sha256_file

    for chunk in iter(lambda: f.read(1024 ** 1024), b""):

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



>   for chunk in iter(lambda: f.read(1024 ** 1024), b""):

                              ^^^^^^^^^^^^^^^^^^^^

E   OverflowError: cannot fit 'int' into an index-sized integer



server.py:130: OverflowError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OverflowError: canno...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - OverflowError: cannot...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Pow, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 ** 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 201 == 413

E            +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

>           assert upload_resp_data.get("id") == 2

E           AssertionError: assert 3 == 2

E            +  where 3 = <built-in method get of dict object at 0x000001C9E6BD2940>('id')

E            +    where <built-in method get of dict object at 0x000001C9E6BD2940> = {'creation': '2025-10-17T00:22:49.954706', 'id': 3, 'name': 'Water File', 'sha256': '5FBAC867F5EFDD7B0AB5C11456B204DDD08FF8801502C93728BE3B38BFAFE80C', ...}.get



..\test\test_api.py:390: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 201 == 413

FAILED ..\test\test_api.py::test_read_watermark_route - AssertionError: asser...

2 failed, 12 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Pow, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 ** 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 201 == 413

E            +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

>           assert upload_resp_data.get("id") == 2

E           AssertionError: assert 3 == 2

E            +  where 3 = <built-in method get of dict object at 0x000002021F3DCF80>('id')

E            +    where <built-in method get of dict object at 0x000002021F3DCF80> = {'creation': '2025-10-16T18:16:11.258705', 'id': 3, 'name': 'Water File', 'sha256': '5FBAC867F5EFDD7B0AB5C11456B204DDD08FF8801502C93728BE3B38BFAFE80C', ...}.get



..\test\test_api.py:390: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 201 == 413

FAILED ..\test\test_api.py::test_read_watermark_route - AssertionError: asser...

2 failed, 12 passed, 22 warnings in 20.88s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_RShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 >> 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_RShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 >> 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_RShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 >> 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_LShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 << 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:360: in upload_document

    sha_hex = _sha256_file(stored_path)

              ^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:130: in _sha256_file

    for chunk in iter(lambda: f.read(1024 << 1024), b""):

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



>   for chunk in iter(lambda: f.read(1024 << 1024), b""):

                              ^^^^^^^^^^^^^^^^^^^^

E   OverflowError: cannot fit 'int' into an index-sized integer



server.py:130: OverflowError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:360: in upload_document

    sha_hex = _sha256_file(stored_path)

              ^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:130: in _sha256_file

    for chunk in iter(lambda: f.read(1024 << 1024), b""):

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



>   for chunk in iter(lambda: f.read(1024 << 1024), b""):

                              ^^^^^^^^^^^^^^^^^^^^

E   OverflowError: cannot fit 'int' into an index-sized integer



server.py:130: OverflowError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OverflowError: canno...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - OverflowError: cannot...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_LShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 << 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 500 == 413

E            +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 413

1 failed, 13 passed, 22 warnings in 20.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_LShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 << 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223706838979Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223707695486Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.66s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitOr, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 | 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 28.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitOr, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 | 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitOr, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 | 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitAnd, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 & 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitAnd, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 & 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitAnd, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 & 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_BitXor, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 ^ 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001746206839Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001747203540Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_BitXor, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 ^ 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192520029090Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192521036962Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_BitXor, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 ^ 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e75078809e14e60b2: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] + "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] + "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] + "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" + g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" + g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for +: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" + g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for +: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir + stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for +: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for +: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root + fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root + file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent + "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent + "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for +: 'WindowsPath' and 'str'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir + candidate
 
         # write bytes
         try:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023210333671Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023211309238Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root + file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] - "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] - "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] - "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" - g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" - g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for -: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" - g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for -: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir - stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for -: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for -: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root - fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root - file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent - "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent - "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for -: 'WindowsPath' and 'str'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir - candidate
 
         # write bytes
         try:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

>       dest_path = dest_dir - candidate

                    ^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for -: 'WindowsPath' and 'str'



server.py:1049: TypeError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec5ee0ad9274a47b1: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.91s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root - file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] * "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] * "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: can't multiply sequence by non-int of type 'WindowsPath'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] * "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: can't multiply sequence by non-int of type 'WindowsPath'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: can't mul...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: can't mult...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" * g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" * g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: can't multiply sequence by non-int of type 'WindowsPath'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" * g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: can't multiply sequence by non-int of type 'WindowsPath'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: can't mul...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: can't mult...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir * stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: can't multiply sequence by non-int of type 'WindowsPath'

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: can't multiply sequence by non-int of type 'WindowsPath'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.81s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root * fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root * file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e82477b8885eeb69a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent * "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent * "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: can't multiply sequence by non-int of type 'WindowsPath'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: can't mu...

1 failed, 13 passed, 22 warnings in 21.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir * candidate
 
         # write bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

>       dest_path = dest_dir * candidate

                    ^^^^^^^^^^^^^^^^^^^^

E       TypeError: can't multiply sequence by non-int of type 'WindowsPath'



server.py:1049: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: can't mu...

1 failed, 13 passed, 22 warnings in 20.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root * file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212446329083Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212447309043Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] // "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] // "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for //: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] // "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for //: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" // g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" // g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for //: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" // g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for //: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir // stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for //: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for //: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root // fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root // file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent // "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent // "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for //: 'WindowsPath' and 'str'



server.py:1045: TypeError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e9ed6a6d91db82f84: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir // candidate
 
         # write bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

>       dest_path = dest_dir // candidate

                    ^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for //: 'WindowsPath' and 'str'



server.py:1049: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root // file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163523937722Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163524862022Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] % "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] % "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for %: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] % "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for %: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" % g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" % g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for %: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" % g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for %: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir % stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for %: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for %: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root % fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root % file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent % "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent % "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for %: 'WindowsPath' and 'str'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir % candidate
 
         # write bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

>       dest_path = dest_dir % candidate

                    ^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for %: 'WindowsPath' and 'str'



server.py:1049: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root % file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0d1a5c366ed7a13f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] ** "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] ** "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] ** "files" / g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" ** g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" ** g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ** or pow(): 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" ** g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ** or pow(): 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir ** stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root ** fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root ** file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent ** "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent ** "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir ** candidate
 
         # write bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

>       dest_path = dest_dir ** candidate

                    ^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'



server.py:1049: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root ** file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] >> "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] >> "files" / g.user["login"]

                                                ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] >> "files" / g.user["login"]

                                                ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" >> g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" >> g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" >> g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir >> stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for >>: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for >>: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root >> fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root >> file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent >> "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200137592728Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200138534820Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir >> candidate
 
         # write bytes
         try:

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root >> file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] << "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] << "files" / g.user["login"]

                                                ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] << "files" / g.user["login"]

                                                ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" << g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" << g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" << g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir << stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for <<: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for <<: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root << fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root << file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182428926754Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182430081237Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 20.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent << "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051745848196Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051746811592Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir << candidate
 
         # write bytes
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035048357316Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035049260875Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root << file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] | "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] | "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] | "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" | g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" | g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" | g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir | stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for |: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for |: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root | fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root | file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent | "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

...F.....F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent | "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'WindowsPath' and 'str'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

2 failed, 12 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir | candidate
 
         # write bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

>       dest_path = dest_dir | candidate

                    ^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'WindowsPath' and 'str'



server.py:1049: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root | file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] & "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] & "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] & "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" & g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" & g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" & g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir & stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for &: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for &: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 21.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root & fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root & file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent & "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent & "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'WindowsPath' and 'str'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir & candidate
 
         # write bytes
         try:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025730743552Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025731716133Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root & file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] ^ "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] ^ "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] ^ "files" / g.user["login"]

                                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for /: 'str' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -338,7 +338,7 @@
             )
             return jsonify({"error": "invalid filename"}), 400
 
-        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
+        user_dir = app.config["STORAGE_DIR"] / "files" ^ g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" ^ g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'WindowsPath' and 'str'



server.py:341: TypeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

>       user_dir = app.config["STORAGE_DIR"] / "files" ^ g.user["login"]

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'WindowsPath' and 'str'



server.py:341: TypeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -347,7 +347,7 @@
 
         try:
             # Check for path traversal attempts
-            stored_path = (user_dir / stored_name).resolve()
+            stored_path = (user_dir ^ stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for ^: 'WindowsPath' and 'str'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: unsupported operand type(s) for ^: 'WindowsPath' and 'str'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -782,7 +782,7 @@
         storage_root = storage_root.resolve()
         fp = Path(p)
         if not fp.is_absolute():
-            fp = storage_root / fp
+            fp = storage_root ^ fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -978,7 +978,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root ^ file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.85s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1042,7 +1042,7 @@
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
-        dest_dir = file_path.parent / "watermarks"
+        dest_dir = file_path.parent ^ "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

>       dest_dir = file_path.parent ^ "watermarks"

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'WindowsPath' and 'str'



server.py:1045: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1046,7 +1046,7 @@
         dest_dir.mkdir(parents=True, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
-        dest_path = dest_dir / candidate
+        dest_path = dest_dir ^ candidate
 
         # write bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

>       dest_path = dest_dir ^ candidate

                    ^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'WindowsPath' and 'str'



server.py:1049: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

1 failed, 13 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1208,7 +1208,7 @@
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
         if not file_path.is_absolute():
-            file_path = storage_root / file_path
+            file_path = storage_root ^ file_path
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_Add, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2+63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T062002542944Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T062003422700Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_Sub, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2-63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.....F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

5 failed, 9 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Pow_Mul, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2*63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_Div, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2/63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.....F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

5 failed, 9 passed, 22 warnings in 19.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_FloorDiv, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2//63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222931859705Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222932657315Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

10 failed, 4 passed, 22 warnings in 19.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_Mod, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2%63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.....F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 200

        assert resp.is_json

        #check types

        #extract data

        doc_list = resp_data.get("versions")

        assert isinstance(doc_list, list)

        #cycle through each element in the list

        for elem in doc_list:

            assert isinstance(elem.get("id"), str)

            assert isinstance(elem.get("documentid"), str)

            #check the version is from the correct document

            assert elem.get("documentid") == str(parameters["documentid"])

            assert isinstance(elem.get("link"), str)

            assert isinstance(elem.get("intended_for"), str)

            assert isinstance(elem.get("secret"), str)

            assert isinstance(elem.get("method"), str)

    

        #Test with no parameters

        resp = client.get("/api/list-versions")

        assert resp.status_code == 400

        #Test with json parameters

        resp = client.get("/api/list-versions", json = parameters)

        assert resp.status_code == 400

        #Test with wrong parameters (missing file)

        resp = client.get("/api/list-versions", query_string = {'documentid': 4})

>       assert resp.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:245: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

WARNING  server:server.py:463 Invalid document id in query

WARNING  server:server.py:463 Invalid document id in query

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

        assert is_pdf

        assert is_inline

    

        #Test with no parameters

        resp = client.get("/api/get-document")

        assert resp.status_code == 400

        #Test with json parameters

        resp = client.get("/api/get-document", json = parameters)

        assert resp.status_code == 400

        #Test with wrong parameters (missing file)

        resp = client.get("/api/get-document", query_string = {'documentid': 4})

>       assert resp.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:293: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:580 Invalid document id in query

WARNING  server:server.py:580 Invalid document id in query

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

>       assert resp.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:350: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 404

FAILED ..\test\test_api.py::test_get_document_route - assert 400 == 404

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 404

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

5 failed, 9 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_RShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2>>63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

...F.F.F.FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Pow_LShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2<<63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_BitOr, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2|63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233053018443Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233054023778Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Pow_BitAnd, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2&63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231303328255Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231304230668Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

8 failed, 6 passed, 22 warnings in 19.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Pow_BitXor, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2^63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int + None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int + None = None):

                                   ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:47:36+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:47:36+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T19:47:37+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:47:37+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int + None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int + None = None):

                                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:32:36+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:32:36+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T19:32:37+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:32:37+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int + None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int + None = None):

                                     ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T16:46:59+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:46:59+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T16:47:00+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:47:00+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int + None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int + None = None):

                                      ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:00:49+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:00:49+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T18:00:50+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:00:50+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes + bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for +: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int + None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int + None = None):

                                    ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T08:01:30+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:01:30+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T08:01:31+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:01:31+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int - None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int - None = None):

                                   ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T22:38:50+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:38:50+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T22:38:51+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:38:51+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int - None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int - None = None):

                                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:38:29+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:38:29+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T03:38:30+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:38:30+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int - None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int - None = None):

                                     ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T20:29:41+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:29:41+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T20:29:42+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:29:42+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int - None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int - None = None):

                                      ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T01:42:44+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:42:44+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T01:42:45+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:42:45+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes - bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for -: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int - None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int - None = None):

                                    ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T06:21:45+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:21:45+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T06:21:46+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:21:46+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int * None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int * None = None):

                                   ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:05:16+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:05:16+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T03:05:18+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:05:19+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 14.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int * None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int * None = None):

                                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T22:47:22+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:47:22+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T22:47:23+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:47:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int * None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int * None = None):

                                     ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T08:09:09+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:09:09+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T08:09:10+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:09:10+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int * None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int * None = None):

                                      ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T07:06:50+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:06:50+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T07:06:51+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:06:51+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes * bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031437387921Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031438363068Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int * None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int * None = None):

                                    ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T20:59:00+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:59:00+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T20:59:01+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:59:01+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int / None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int / None = None):

                                   ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T05:03:11+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T05:03:11+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T05:03:12+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T05:03:12+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int / None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int / None = None):

                                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T17:10:49+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:10:49+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T17:10:50+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:10:50+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int / None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int / None = None):

                                     ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T20:15:41+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:15:41+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T20:15:42+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:15:42+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int / None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int / None = None):

                                      ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T08:14:41+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:14:41+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T08:14:42+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:14:43+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes / bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for /: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int / None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int / None = None):

                                    ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:03:29+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:03:29+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T19:03:30+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:03:30+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int // None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int // None = None):

                                   ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:38:18+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:38:18+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T18:38:19+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:38:19+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int // None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int // None = None):

                                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T16:31:13+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:31:13+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T16:31:14+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:31:14+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int // None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int // None = None):

                                     ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T01:18:00+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:18:00+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Network softsec-tatou_default  Removed

time="2025-10-17T01:18:01+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:18:01+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int // None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int // None = None):

                                      ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:50:35+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:50:35+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T18:50:36+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:50:36+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes // bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for //: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 19.83s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int // None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int // None = None):

                                    ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:01:03+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:01:03+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T18:01:04+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:01:04+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int % None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int % None = None):

                                   ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T17:55:40+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:55:40+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T17:55:41+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:55:41+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int % None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int % None = None):

                                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:54:04+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:54:04+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T19:54:05+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:54:05+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int % None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int % None = None):

                                     ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T01:55:47+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:55:47+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T01:55:48+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:55:48+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int % None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int % None = None):

                                      ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T16:54:44+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:54:44+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T16:54:45+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:54:45+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes % bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for %: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int % None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int % None = None):

                                    ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T06:19:23+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:19:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T06:19:24+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:19:24+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 14.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int ** None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int ** None = None):

                                   ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T23:30:34+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:30:34+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T23:30:35+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:30:35+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int ** None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int ** None = None):

                                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:10:27+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:10:28+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T19:10:29+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:10:29+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int ** None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int ** None = None):

                                     ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T16:54:09+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:54:09+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T16:54:10+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:54:10+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int ** None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int ** None = None):

                                      ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T21:09:37+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T21:09:37+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T21:09:38+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T21:09:38+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes ** bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ** or pow(): 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int ** None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int ** None = None):

                                    ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:16:41+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:16:41+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T03:16:42+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:16:42+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int >> None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int >> None = None):

                                   ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T20:54:28+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:54:28+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T20:54:29+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T20:54:29+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int >> None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int >> None = None):

                                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T04:18:22+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T04:18:22+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T04:18:23+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T04:18:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int >> None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int >> None = None):

                                     ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T01:36:28+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:36:29+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T01:36:29+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:36:30+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int >> None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int >> None = None):

                                      ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T06:48:03+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:48:03+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T06:48:04+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:48:04+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes >> bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for >>: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int >> None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int >> None = None):

                                    ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T17:30:13+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:30:13+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T17:30:14+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:30:14+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int << None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int << None = None):

                                   ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:33:52+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:33:52+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T19:33:53+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:33:53+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int << None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int << None = None):

                                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T23:17:06+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:17:06+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T23:17:07+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:17:07+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int << None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int << None = None):

                                     ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:35:51+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:35:51+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T03:35:52+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:35:52+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int << None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int << None = None):

                                      ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T22:54:59+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:54:59+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T22:55:00+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:55:00+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes << bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for <<: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int << None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int << None = None):

                                    ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T17:41:25+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:41:25+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T17:41:26+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:41:26+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int & None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int & None = None):

                                   ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:15:51+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:15:51+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T19:15:52+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:15:52+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int & None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int & None = None):

                                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T02:07:56+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:07:56+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T02:07:57+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:07:57+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int & None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int & None = None):

                                     ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T23:37:07+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:37:07+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T23:37:08+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:37:08+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int & None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int & None = None):

                                      ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:27:04+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:27:04+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T18:27:05+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:27:05+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes & bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for &: 'type' and 'type'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed0ea412b9753ff31: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int & None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int & None = None):

                                    ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:08:34+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:08:34+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T18:08:35+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:08:35+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -453,7 +453,7 @@
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
-    def list_versions(document_id: int | None = None):
+    def list_versions(document_id: int ^ None = None):
         # Input validation
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:456: in create_app

    def list_versions(document_id: int ^ None = None):

                                   ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T06:18:23+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:18:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T06:18:24+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:18:24+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -570,7 +570,7 @@
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
-    def get_document(document_id: int | None = None):
+    def get_document(document_id: int ^ None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:573: in create_app

    def get_document(document_id: int ^ None = None):

                                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T07:00:47+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:00:47+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T07:00:48+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:00:48+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -801,7 +801,7 @@
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
-    def delete_document(document_id: int | None = None):
+    def delete_document(document_id: int ^ None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:804: in create_app

    def delete_document(document_id: int ^ None = None):

                                     ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:20:39+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:20:39+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T18:20:40+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:20:40+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -906,7 +906,7 @@
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
-    def create_watermark(document_id: int | None = None):
+    def create_watermark(document_id: int ^ None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:909: in create_app

    def create_watermark(document_id: int ^ None = None):

                                      ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T02:35:48+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:35:48+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T02:35:49+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:35:49+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes ^ bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ^: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1143,7 +1143,7 @@
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
-    def read_watermark(document_id: int | None = None):
+    def read_watermark(document_id: int ^ None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:
             document_id = (


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:1146: in create_app

    def read_watermark(document_id: int ^ None = None):

                                    ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T05:44:58+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T05:44:58+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T05:44:59+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T05:44:59+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file or file.filename != "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) != 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T032746344828Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T032747303260Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if __name__ != "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

timeout

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file or file.filename < "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044124269932Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044125253079Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) < 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.85s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if __name__ < "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file or file.filename <= "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053212478833Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053213376746Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) <= 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if __name__ <= "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file or file.filename > "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) > 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 44 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1026 Watermarking produced no output for document 1 using method robust-xmp

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e09d8a933f38ed316: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 23.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if __name__ > "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

timeout

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file or file.filename >= "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) >= 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 44 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1026 Watermarking produced no output for document 1 using method robust-xmp

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if __name__ >= "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

timeout

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file or file.filename is "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:307

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:307: SyntaxWarning: "is" with 'str' literal. Did you mean "=="?

    if not file or file.filename is "":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 20.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if __name__ is "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:1264

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:1264: SyntaxWarning: "is" with 'str' literal. Did you mean "=="?

    if __name__ is "__main__":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 20.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file or file.filename is not "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:307

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:307: SyntaxWarning: "is not" with 'str' literal. Did you mean "!="?

    if not file or file.filename is not "":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 23 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if __name__ is not "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

timeout

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if file.mimetype == "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 415 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 415 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if head == b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:645 Invalid PDF signature for document id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 20.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if header == b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if provided == token_required:
             return False
         return True

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163017353300Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163018342302Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if file.mimetype < "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if head < b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if header < b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if provided < token_required:
             return False
         return True

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614edf1bed9c7642c6a3: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 21.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if file.mimetype <= "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 415 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 415 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if head <= b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023026311134Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023027235496Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if header <= b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if provided <= token_required:
             return False
         return True

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160233146981Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160233988525Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if file.mimetype > "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if head > b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if header > b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165623693620Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165624670137Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if provided > token_required:
             return False
         return True

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201051140315Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201052038863Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if file.mimetype >= "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 415 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 415 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if head >= b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T140631892255Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T140632966795Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if header >= b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if provided >= token_required:
             return False
         return True

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055613210839Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055614185137Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if file.mimetype is "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:320

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:320: SyntaxWarning: "is" with 'str' literal. Did you mean "=="?

    if file.mimetype is "application/pdf":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 21.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if head is b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:643

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:643: SyntaxWarning: "is" with 'bytes' literal. Did you mean "=="?

    if head is b"%PDF-":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if header is b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190055645171Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190056600511Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:737

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:737: SyntaxWarning: "is" with 'bytes' literal. Did you mean "=="?

    if header is b"%PDF-":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 23 warnings in 19.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if provided is token_required:
             return False
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if file.mimetype is not "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:320

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:320: SyntaxWarning: "is not" with 'str' literal. Did you mean "!="?

    if file.mimetype is not "application/pdf":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 415 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 415 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 23 warnings in 19.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if head is not b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:645 Invalid PDF signature for document id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:643

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:643: SyntaxWarning: "is not" with 'bytes' literal. Did you mean "!="?

    if head is not b"%PDF-":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 23 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if header is not b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001443515834Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001444386192Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



server.py:737

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\server.py:737: SyntaxWarning: "is not" with 'bytes' literal. Did you mean "!="?

    if header is not b"%PDF-":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 23 warnings in 19.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if provided is not token_required:
             return False
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id == 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id == 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e75239795debe531e: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id == 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id == 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id == 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id == 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id != 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192458760453Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192459772862Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id != 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002611761725Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002612661673Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id != 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:446: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 404

2 failed, 12 passed, 22 warnings in 21.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id != 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 21.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id != 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef560a9e411a7ac9a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id != 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id < 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id < 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id < 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id < 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id < 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id < 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id > 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id > 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id > 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

...F...F.FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1c77a67b355a20eb: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id > 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id > 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id > 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 25.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id >= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id >= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id >= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:446: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 404

2 failed, 12 passed, 22 warnings in 20.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id >= 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174457659566Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174458670562Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

10 failed, 4 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id >= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171156392900Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171157236434Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id >= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) == 320 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 or len(login) == 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length and file.content_length == MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 201 == 413

E            +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

>           assert upload_resp_data.get("id") == 2

E           AssertionError: assert 3 == 2

E            +  where 3 = <built-in method get of dict object at 0x0000021FCA9A2200>('id')

E            +    where <built-in method get of dict object at 0x0000021FCA9A2200> = {'creation': '2025-10-17T03:06:18.113591', 'id': 3, 'name': 'Water File', 'sha256': '5FBAC867F5EFDD7B0AB5C11456B204DDD08FF8801502C93728BE3B38BFAFE80C', ...}.get



..\test\test_api.py:390: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 201 == 413

FAILED ..\test\test_api.py::test_read_watermark_route - AssertionError: asser...

2 failed, 12 passed, 22 warnings in 21.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 or document_id == MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id == MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id == MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 or doc_id == MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id == MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id == MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173324928655Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173325815091Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) != 320 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 36 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054608604502Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054609592062Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 or len(login) != 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 36 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011951430007Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011952394652Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length and file.content_length != MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201515853583Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201516867232Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.83s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 or document_id != MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id != MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id != MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:446: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 404

2 failed, 12 passed, 22 warnings in 20.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 or doc_id != MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id != MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141303446643Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141304402767Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id != MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) < 320 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 36 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171055236960Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171056101636Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 or len(login) < 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 36 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224351145014Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224352146478Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 20.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length and file.content_length < MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182002688318Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182003602131Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 or document_id < MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055208370591Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055209315930Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id < MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id < MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040937953006Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040938869428Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.61s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 or doc_id < MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151427778917Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151428654805Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

9 failed, 5 passed, 22 warnings in 19.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id < MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id < MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) <= 320 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 36 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014237306969Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014238257949Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 or len(login) <= 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFFFF.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 36 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213027381126Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213028227862Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

10 failed, 4 passed, 22 warnings in 19.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length and file.content_length <= MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 201 == 413

E            +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

>           assert upload_resp_data.get("id") == 2

E           AssertionError: assert 3 == 2

E            +  where 3 = <built-in method get of dict object at 0x00000228BD07AA40>('id')

E            +    where <built-in method get of dict object at 0x00000228BD07AA40> = {'creation': '2025-10-16T15:25:16.167040', 'id': 3, 'name': 'Water File', 'sha256': '5FBAC867F5EFDD7B0AB5C11456B204DDD08FF8801502C93728BE3B38BFAFE80C', ...}.get



..\test\test_api.py:390: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 201 == 413

FAILED ..\test\test_api.py::test_read_watermark_route - AssertionError: asser...

2 failed, 12 passed, 22 warnings in 20.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 or document_id <= MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id <= MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 25.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id <= MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025619735026Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025620654636Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 or doc_id <= MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 22.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id <= MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id <= MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) >= 320 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 or len(login) >= 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length and file.content_length >= MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 or document_id >= MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id >= MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id >= MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 or doc_id >= MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193230227375Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193231161127Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id >= MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id >= MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Is, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length and file.content_length is MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e518cc3a4126099e0: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Is, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 or document_id is MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Is, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id is MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200905857818Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200906698201Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Is, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id is MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170219356069Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170220197173Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Is, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 or doc_id is MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Is, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id is MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Is, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id is MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_IsNot, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length and file.content_length is not MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_IsNot, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 or document_id is not MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234217208412Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234218092185Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_IsNot, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id is not MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_IsNot, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 or document_id is not MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:446: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 404

2 failed, 12 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_IsNot, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 or doc_id is not MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010746974726Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010747902391Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

9 failed, 5 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_IsNot, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id is not MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_IsNot, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 or doc_id is not MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_Eq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable == False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_NotEq, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable != False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155432007173Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155432945141Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_Lt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable < False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_LtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable <= False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_Gt, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable > False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_GtE, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable >= False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 21.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -71,7 +71,7 @@
 
     def get_engine():
         eng = app.config.get("_ENGINE")
-        if eng is None:
+        if eng is not None:
             try:
                 eng = create_engine(db_url(), pool_pre_ping=True, future=True)
             except Exception as e:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: 'NoneType' object has no attribute 'begin'

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: 'NoneType' object has no attribute 'connect'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205627757971Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document 'NoneType' object has no attribute 'connect'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205628593543Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: 'NoneType' object has no attribute 'connect'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: 'NoneType' object has no attribute 'begin'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -455,7 +455,7 @@
     @require_auth
     def list_versions(document_id: int | None = None):
         # Input validation
-        if document_id is None:
+        if document_id is not None:
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231059643741Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231100530798Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is not None or document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is not None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

...F.F...FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb48e2b64635ab109: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 19.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -572,7 +572,7 @@
     @require_auth
     def get_document(document_id: int | None = None):
         # Support both path param and ?id=/ ?documentid=
-        if document_id is None:
+        if document_id is not None:
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id)

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:446: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:580 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 404

2 failed, 12 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is not None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:446: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 404

2 failed, 12 passed, 22 warnings in 22.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -810,7 +810,7 @@
                 or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )
 
-        if document_id is None:
+        if document_id is not None:
             app.logger.warning("Document id required for deletion")
             return jsonify({"error": "document id required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030904307583Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030905285580Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:814 Document id required for deletion

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

8 failed, 6 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -930,7 +930,7 @@
 
         # validate input
         try:
-            if doc_id is None:
+            if doc_id is not None:
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:934 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable is not False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1165,7 +1165,7 @@
 
         # validate input
         try:
-            if doc_id is None:
+            if doc_id is not None:
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1169 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -81,7 +81,7 @@
         return eng
 
     # --- RMAP initialization (skippable in tests) ---
-    if RMAPHandler is not None:
+    if RMAPHandler is None:
         try:
             RMAPHandler(app, str(app.config["STORAGE_DIR"]), get_engine)
         except Exception as e:  # pragma: no cover - defensive; don't fail app

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -141,7 +141,7 @@
             # capture request size if content-length header present
             try:
                 cl = request.content_length
-                if cl is not None:
+                if cl is None:
                     observe_request_size(request.method, route, cl)
             except Exception as exc:  # pragma: no cover - soft fail
                 app.logger.warning("Request size capture failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -152,7 +152,7 @@
     def _tatou_after(resp):
         try:
             start = getattr(request, "_tatou_start", None)
-            if start is not None:
+            if start is None:
                 dur = time.time() - start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053635599166Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053636431274Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -34,7 +34,7 @@
 MAX_DB_INT = (2**63) - 1
 
 RMAPHandler = None  # default
-if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):
+if  os.environ.get("TATOU_TEST_DISABLE_RMAP"):
     try:  # Allow tests to disable RMAP dependency via env var
         from rmap_handler import RMAPHandler as _RMAPHandler  # type: ignore

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001524330438Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001524567484Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -102,7 +102,7 @@
                 g.user = {"id": 1, "login": "username", "email": "user@email.se"}
                 return f(*args, **kwargs)
             auth = request.headers.get("Authorization", "")
-            if not auth.startswith("Bearer "):
+            if  auth.startswith("Bearer "):
                 return _auth_error("Missing or invalid Authorization header")
             token = auth.split(" ", 1)[1].strip()
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -187,7 +187,7 @@
         """Validate user input before database operations"""
         if len(email) > 320 or len(login) > 64:
             return False, "Email or login too long"
-        if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
+        if  re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"
         if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
             return False, "Invalid login format"

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid email format

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004351080357Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004351938886Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid email format

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -189,7 +189,7 @@
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"
-        if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
+        if  re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
             return False, "Invalid login format"
         return True, ""

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid login format

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155645323724Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155646216694Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid login format

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -201,7 +201,7 @@
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""
         start_db = time.time()
-        if not email or not login or not password:
+        if  email or not login or not password:
             app.logger.warning("Missing fields in user creation: %s", payload)
             return jsonify({"error": "email, login, and password are required"}), 400

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'user@email.se', 'login': 'username', 'password': 'password'}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011356133882Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011357055022Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'service@rmap.su', 'login': 'rmap_service', 'password': 'password_rmap'}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -201,7 +201,7 @@
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""
         start_db = time.time()
-        if not email or not login or not password:
+        if not email or  login or not password:
             app.logger.warning("Missing fields in user creation: %s", payload)
             return jsonify({"error": "email, login, and password are required"}), 400

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'user@email.se', 'login': 'username', 'password': 'password'}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040855163564Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040856096583Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'service@rmap.su', 'login': 'rmap_service', 'password': 'password_rmap'}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -201,7 +201,7 @@
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""
         start_db = time.time()
-        if not email or not login or not password:
+        if not email or not login or  password:
             app.logger.warning("Missing fields in user creation: %s", payload)
             return jsonify({"error": "email, login, and password are required"}), 400

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'user@email.se', 'login': 'username', 'password': 'password'}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000310706490Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000311658266Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'service@rmap.su', 'login': 'rmap_service', 'password': 'password_rmap'}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -209,7 +209,7 @@
 
         try:
             is_valid, error_msg = validate_user_input(email, login)
-            if not is_valid:
+            if  is_valid:
                 app.logger.warning("User input validation failed: %s", error_msg)
                 return jsonify({"error": error_msg}), 400

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 13 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed:

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040643012341Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040643997675Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: 

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -245,7 +245,7 @@
         email = (payload.get("email") or "").strip()
         password = payload.get("password") or ""
 
-        if not email or not password:
+        if  email or not password:
             app.logger.warning("Missing fields in login attempt: %s", payload)
             return jsonify({"error": "email and password are required"}), 400

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 44 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {'email': 'user@email.se', 'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -245,7 +245,7 @@
         email = (payload.get("email") or "").strip()
         password = payload.get("password") or ""
 
-        if not email or not password:
+        if not email or  password:
             app.logger.warning("Missing fields in login attempt: %s", payload)
             return jsonify({"error": "email and password are required"}), 400

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 44 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {'email': 'user@email.se', 'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -268,7 +268,7 @@
                     is_valid = False
                     row = None
 
-                if not is_valid:
+                if  is_valid:
                     app.logger.warning(
                         "Failed login attempt for email: %s",
                         email if email else "<empty>",

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if  file or file.filename == "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -323,7 +323,7 @@
                 "Upload attempt with invalid MIME type: %s", file.mimetype
             )
             return jsonify({"error": "only PDF files are allowed"}), 415
-        if not file.filename.lower().endswith(".pdf"):
+        if  file.filename.lower().endswith(".pdf"):
             inc_suspicious("upload_bad_extension")
             app.logger.warning(
                 "Upload attempt with invalid file extension: %s", file.filename

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:328 Upload attempt with invalid file extension: input.pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:328 Upload attempt with invalid file extension: watermarked.pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 415 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 415 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 13

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -332,7 +332,7 @@
 
         # Sanitize filename
         fname = secure_filename(file.filename)
-        if not fname:
+        if  fname:
             app.logger.warning(
                 "Upload attempt with invalid filename: %s", file.filename
             )

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 29 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:336 Upload attempt with invalid filename: input.pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 29 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:336 Upload attempt with invalid filename: watermarked.pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 14

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -348,7 +348,7 @@
         try:
             # Check for path traversal attempts
             stored_path = (user_dir / stored_name).resolve()
-            if not str(stored_path).startswith(str(user_dir.resolve())):
+            if  str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 25 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:352 Upload attempt with invalid path: C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223419230146Z__input.pdf

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 25 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:352 Upload attempt with invalid path: C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223420067525Z__watermarked.pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 15

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -482,7 +482,7 @@
                     {"did": document_id, "uid": int(g.user["id"])},
                 ).first()
 
-                if not doc:
+                if  doc:
                     app.logger.warning(
                         "Document not found or access denied for id=%s", document_id
                     )

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

1 failed, 13 passed, 22 warnings in 21.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 16

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -526,7 +526,7 @@
     def list_all_versions():
         try:
             # Validate user data from auth token
-            if not g.user or not g.user.get("id"):
+            if  g.user or not g.user.get("id"):
                 app.logger.error("Missing user info in auth token")
                 return jsonify({"error": "Invalid authentication"}), 401

......F.......                                                           [100%]

================================== FAILURES ===================================

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 35 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:530 Missing user info in auth token

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 401 == 200

1 failed, 13 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 17

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -526,7 +526,7 @@
     def list_all_versions():
         try:
             # Validate user data from auth token
-            if not g.user or not g.user.get("id"):
+            if not g.user or  g.user.get("id"):
                 app.logger.error("Missing user info in auth token")
                 return jsonify({"error": "Invalid authentication"}), 401

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051957337814Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 35 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:530 Missing user info in auth token

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051958402354Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 401 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 21.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 18

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -606,7 +606,7 @@
             ), 503
 
         # DonÔÇÖt leak whether a doc exists for another user
-        if not row:
+        if  row:
             app.logger.warning(
                 "Document not found or access denied for id=%s", document_id
             )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044252127444Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

>       resp = client.get("/api/get-document", query_string=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:273: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.get("/api/get-document")

    @app.get("/api/get-document/<int:document_id>")

    @require_auth

    def get_document(document_id: int | None = None):

        # Support both path param and ?id=/ ?documentid=

        if document_id is None:

            document_id = request.args.get("id") or request.args.get("documentid")

            try:

                document_id = int(document_id)

            except (TypeError, ValueError):

                app.logger.warning("Invalid document id in query")

                return jsonify({"error": "document id required"}), 400

    

        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:

            return jsonify({"error": "document id required"}), 400

    

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id AND ownerid = :uid

                        LIMIT 1

                    """

                    ),

                    {"id": document_id, "uid": int(g.user["id"])},

                ).first()

        except Exception:

            app.logger.error(

                f"Database error in get_document: {document_id},{g.user['id']}"

            )

            inc_db_error("get_document")

            return jsonify(

                {"error": "An error occurred while fetching the document"}

            ), 503

    

        # DonÔÇÖt leak whether a doc exists for another user

        if  row:

            app.logger.warning(

                "Document not found or access denied for id=%s", document_id

            )

            return jsonify({"error": "document not found"}), 404

    

        storage_root = app.config["STORAGE_DIR"].resolve()

>       file_path = Path(row.path)

                         ^^^^^^^^

E       AttributeError: 'NoneType' object has no attribute 'path'



server.py:616: AttributeError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044253148301Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - AttributeError: 'NoneTy...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 19

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -626,7 +626,7 @@
             )
             return jsonify({"error": "document path invalid"}), 500
 
-        if not resolved.exists():
+        if  resolved.exists():
             app.logger.error("File missing on disk for document id=%s", document_id)
             return jsonify({"error": "file missing on disk"}), 410

...F...F......                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:630 File missing on disk for document id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_get_document_route - assert False

2 failed, 12 passed, 22 warnings in 21.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 20

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -651,7 +651,7 @@
 
             # Prepare safe filename (preserve existing .pdf if present)
             name = (row.name or "document").strip().replace("\r", "").replace("\n", "")
-            if not name.lower().endswith(".pdf"):
+            if  name.lower().endswith(".pdf"):
                 name = f"{name}.pdf"
 
             # Stat via the same FD to avoid TOCTOU

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 21

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -693,7 +693,7 @@
     @app.get("/api/get-version/<link>")
     def get_version(link: str):
         # Accept both 32-char (RMAP session secrets) and 64-char (SHA-256 style) tokens
-        if not re.fullmatch(r"[0-9a-f]{32}|[0-9a-f]{64}", link):
+        if  re.fullmatch(r"[0-9a-f]{32}|[0-9a-f]{64}", link):
             app.logger.warning("Invalid version link format: %s", link)
             return jsonify({"error": "document not found"}), 404

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 22

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -715,7 +715,7 @@
             inc_db_error("get_version")
             return jsonify({"error": "database error"}), 503
 
-        if not row:
+        if  row:
             app.logger.warning("Version not found for link: %s", link)
             return jsonify({"error": "document not found"}), 404

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 23

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -727,7 +727,7 @@
             )
             return jsonify({"error": "document path invalid"}), 500
 
-        if not resolved.exists():
+        if  resolved.exists():
             app.logger.error("File missing on disk for version link=%s", link)
             return jsonify({"error": "file missing on disk"}), 410

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 24

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -781,7 +781,7 @@
     def _safe_resolve_under_storage(p: str, storage_root: Path) -> Path:
         storage_root = storage_root.resolve()
         fp = Path(p)
-        if not fp.is_absolute():
+        if  fp.is_absolute():
             fp = storage_root / fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 25

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -786,7 +786,7 @@
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):
-            if not fp.is_relative_to(storage_root):
+            if  fp.is_relative_to(storage_root):
                 raise RuntimeError(f"path {fp} escapes storage root {storage_root}")
         else:
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 26

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -845,7 +845,7 @@
             inc_db_error("delete_document_select")
             return jsonify({"error": "database error during delete"}), 503
 
-        if not row:
+        if  row:
             # DonÔÇÖt reveal othersÔÇÖ docsÔÇöjust say not found
             app.logger.warning(
                 "Document not found or access denied for deletion id=%s", doc_id

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

1 failed, 13 passed, 22 warnings in 21.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 27

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -908,7 +908,7 @@
     @require_auth
     def create_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
-        if not document_id:
+        if  document_id:
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:934 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 28

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -940,7 +940,7 @@
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
         if (
-            not method
+             method
             or not intended_for
             or not isinstance(secret, str)
             or not isinstance(key, str)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 63 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'method': 'robust-xmp', 'position': 'metadata-only', 'secret': 'secret'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.90s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 29

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -941,7 +941,7 @@
             return jsonify({"error": "document_id (int) is required"}), 400
         if (
             not method
-            or not intended_for
+            or  intended_for
             or not isinstance(secret, str)
             or not isinstance(key, str)
         ):

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 63 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'method': 'robust-xmp', 'position': 'metadata-only', 'secret': 'secret'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 30

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -942,7 +942,7 @@
         if (
             not method
             or not intended_for
-            or not isinstance(secret, str)
+            or  isinstance(secret, str)
             or not isinstance(key, str)
         ):
             app.logger.warning("Missing required fields for watermarking: %s", payload)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 63 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'method': 'robust-xmp', 'position': 'metadata-only', 'secret': 'secret'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 31

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -943,7 +943,7 @@
             not method
             or not intended_for
             or not isinstance(secret, str)
-            or not isinstance(key, str)
+            or  isinstance(key, str)
         ):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 63 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'method': 'robust-xmp', 'position': 'metadata-only', 'secret': 'secret'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 32

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -968,7 +968,7 @@
             app.logger.error("Database error fetching document %s", e)
             return jsonify({"error": "database error"}), 503
 
-        if not row:
+        if  row:
             app.logger.warning(
                 "Document not found or access denied for watermarking id=%s", doc_id
             )

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

1 failed, 13 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 33

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -977,7 +977,7 @@
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
-        if not file_path.is_absolute():
+        if  file_path.is_absolute():
             file_path = storage_root / file_path
         file_path = file_path.resolve()
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020609195823Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020610124068Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 34

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -985,7 +985,7 @@
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
             return jsonify({"error": "document path invalid"}), 500
-        if not file_path.exists():
+        if  file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 410 == 201

E        +  where 410 = <WrapperTestResponse 33 bytes [410 GONE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:989 File missing on disk for document id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 410 == 201

1 failed, 13 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 35

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if  isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 36

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1145,7 +1145,7 @@
     @require_auth
     def read_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
-        if not document_id:
+        if  document_id:
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1169 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 37

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1174,7 +1174,7 @@
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
-        if not method or not isinstance(method, str) or not isinstance(key, str):
+        if  method or not isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 41 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1178 Missing required fields for watermarking: {'id': 2, 'key': 'strong-password', 'method': 'overlay-watermark', 'position': 'metadata-only'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.83s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 38

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1174,7 +1174,7 @@
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
-        if not method or not isinstance(method, str) or not isinstance(key, str):
+        if not method or  isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1bfc99941133eec5: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 39

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1174,7 +1174,7 @@
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
-        if not method or not isinstance(method, str) or not isinstance(key, str):
+        if not method or not isinstance(method, str) or  isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 41 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1178 Missing required fields for watermarking: {'id': 2, 'key': 'strong-password', 'method': 'overlay-watermark', 'position': 'metadata-only'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 40

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1198,7 +1198,7 @@
             )
             return jsonify({"error": "database error"}), 503
 
-        if not row:
+        if  row:
             app.logger.warning(
                 "Document not found or access denied for watermark read id=%s", doc_id
             )

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1202 Document not found or access denied for watermark read id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 404 == 201

1 failed, 13 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 41

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1207,7 +1207,7 @@
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
-        if not file_path.is_absolute():
+        if  file_path.is_absolute():
             file_path = storage_root / file_path
         file_path = file_path.resolve()
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 42

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1215,7 +1215,7 @@
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
             return jsonify({"error": "document path invalid"}), 500
-        if not file_path.exists():
+        if  file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 43

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1246,7 +1246,7 @@
 
     @app.get("/metrics")
     def metrics():
-        if not _is_authorized_metrics_request():
+        if  _is_authorized_metrics_request():
             # Obscure existence a bit ÔÇô return 404 instead of 403 to casual scans
             app.logger.warning(
                 "Unauthorized metrics access attempt from %s", request.remote_addr

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -34,7 +34,7 @@
 MAX_DB_INT = (2**63) - 1
 
 RMAPHandler = None  # default
-if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):
+if not not os.environ.get("TATOU_TEST_DISABLE_RMAP"):
     try:  # Allow tests to disable RMAP dependency via env var
         from rmap_handler import RMAPHandler as _RMAPHandler  # type: ignore

.FFFFF.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031721917928Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031722251569Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

11 failed, 3 passed, 9 warnings in 13.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -71,7 +71,7 @@
 
     def get_engine():
         eng = app.config.get("_ENGINE")
-        if eng is None:
+        if not eng is None:
             try:
                 eng = create_engine(db_url(), pool_pre_ping=True, future=True)
             except Exception as e:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: 'NoneType' object has no attribute 'begin'

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: 'NoneType' object has no attribute 'connect'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223358858725Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document 'NoneType' object has no attribute 'connect'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223359585742Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: 'NoneType' object has no attribute 'connect'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: 'NoneType' object has no attribute 'begin'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -81,7 +81,7 @@
         return eng
 
     # --- RMAP initialization (skippable in tests) ---
-    if RMAPHandler is not None:
+    if not RMAPHandler is not None:
         try:
             RMAPHandler(app, str(app.config["STORAGE_DIR"]), get_engine)
         except Exception as e:  # pragma: no cover - defensive; don't fail app

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200023741880Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200023966265Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -98,7 +98,7 @@
     def require_auth(f):
         @wraps(f)
         def wrapper(*args, **kwargs):
-            if app.config['TESTING']:
+            if not app.config['TESTING']:
                 g.user = {"id": 1, "login": "username", "email": "user@email.se"}
                 return f(*args, **kwargs)
             auth = request.headers.get("Authorization", "")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 401 == 201

E            +  where 401 = <WrapperTestResponse 52 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 52 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 52 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 52 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 401 == 201

E        +  where 401 = <WrapperTestResponse 52 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 401 == 201

E            +  where 401 = <WrapperTestResponse 52 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:95 Auth error (401): Missing or invalid Authorization header

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 401 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 401 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 401 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 401 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 401 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 401 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 401 == 200

10 failed, 4 passed, 22 warnings in 19.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -102,7 +102,7 @@
                 g.user = {"id": 1, "login": "username", "email": "user@email.se"}
                 return f(*args, **kwargs)
             auth = request.headers.get("Authorization", "")
-            if not auth.startswith("Bearer "):
+            if not not auth.startswith("Bearer "):
                 return _auth_error("Missing or invalid Authorization header")
             token = auth.split(" ", 1)[1].strip()
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -136,7 +136,7 @@
     def _tatou_before():
         try:  # record start for latency
             request._tatou_start = time.time()  # type: ignore[attr-defined]
-            route = request.url_rule.rule if request.url_rule else request.path
+            route = request.url_rule.rule if not request.url_rule else request.path
             inc_inflight(route)
             # capture request size if content-length header present
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -141,7 +141,7 @@
             # capture request size if content-length header present
             try:
                 cl = request.content_length
-                if cl is not None:
+                if not cl is not None:
                     observe_request_size(request.method, route, cl)
             except Exception as exc:  # pragma: no cover - soft fail
                 app.logger.warning("Request size capture failed: %s", exc)

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211426149062Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211427309130Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 21.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -152,7 +152,7 @@
     def _tatou_after(resp):
         try:
             start = getattr(request, "_tatou_start", None)
-            if start is not None:
+            if not start is not None:
                 dur = time.time() - start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035148053628Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035148971652Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -154,7 +154,7 @@
             start = getattr(request, "_tatou_start", None)
             if start is not None:
                 dur = time.time() - start
-                route = request.url_rule.rule if request.url_rule else request.path
+                route = request.url_rule.rule if not request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
         except Exception as exc:  # pragma: no cover - defensive
             app.logger.warning("after_request instrumentation failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if not len(email) > 320 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 36 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043327436610Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043328453761Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Email or login too long

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -187,7 +187,7 @@
         """Validate user input before database operations"""
         if len(email) > 320 or len(login) > 64:
             return False, "Email or login too long"
-        if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
+        if not not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"
         if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
             return False, "Invalid login format"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid email format

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T145554121275Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T145555020738Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid email format

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -189,7 +189,7 @@
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"
-        if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
+        if not not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
             return False, "Invalid login format"
         return True, ""

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid login format

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213617036713Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213618095161Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: Invalid login format

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 20.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -201,7 +201,7 @@
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""
         start_db = time.time()
-        if not email or not login or not password:
+        if not not email or not login or not password:
             app.logger.warning("Missing fields in user creation: %s", payload)
             return jsonify({"error": "email, login, and password are required"}), 400

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'user@email.se', 'login': 'username', 'password': 'password'}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232032699243Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232033674852Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'service@rmap.su', 'login': 'rmap_service', 'password': 'password_rmap'}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 18.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 13

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -209,7 +209,7 @@
 
         try:
             is_valid, error_msg = validate_user_input(email, login)
-            if not is_valid:
+            if not not is_valid:
                 app.logger.warning("User input validation failed: %s", error_msg)
                 return jsonify({"error": error_msg}), 400

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 13 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed:

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201828485096Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201829396459Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: 

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 14

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -245,7 +245,7 @@
         email = (payload.get("email") or "").strip()
         password = payload.get("password") or ""
 
-        if not email or not password:
+        if not not email or not password:
             app.logger.warning("Missing fields in login attempt: %s", payload)
             return jsonify({"error": "email and password are required"}), 400

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 44 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {'email': 'user@email.se', 'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 15

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -261,7 +261,7 @@
                 ).first()
 
                 # Constant-time comparison to prevent timing attacks
-                if row:
+                if not row:
                     is_valid = check_password_hash(row.hpassword, password)
                 else:
                     # Dummy check to maintain constant time

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

1 failed, 13 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 16

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -268,7 +268,7 @@
                     is_valid = False
                     row = None
 
-                if not is_valid:
+                if not not is_valid:
                     app.logger.warning(
                         "Failed login attempt for email: %s",
                         email if email else "<empty>",

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

1 failed, 13 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 17

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -271,7 +271,7 @@
                 if not is_valid:
                     app.logger.warning(
                         "Failed login attempt for email: %s",
-                        email if email else "<empty>",
+                        email if not email else "<empty>",
                     )
                     inc_login_failure("invalid_credentials")
                     return jsonify({"error": "invalid credentials"}), 401

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 18

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -298,7 +298,7 @@
     @app.post("/api/upload-document")
     @require_auth
     def upload_document():
-        if "file" not in request.files:
+        if not "file" not in request.files:
             inc_suspicious("upload_missing_file_field")
             app.logger.warning("Upload attempt missing 'file' field")
             return jsonify({"error": "file is required (multipart/form-data)"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 51 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 51 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 19

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not not file or file.filename == "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 27 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:308 Upload attempt with empty filename

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 20

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if not file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 500 == 413

E            +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 500 == 413

1 failed, 13 passed, 22 warnings in 20.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 21

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -317,7 +317,7 @@
             return jsonify({"error": "file too large"}), 413
 
         # Validate file type and MIME type
-        if file.mimetype != "application/pdf":
+        if not file.mimetype != "application/pdf":
             inc_suspicious("upload_bad_mime")
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:322 Upload attempt with invalid MIME type: application/pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 415 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 415 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 22

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -323,7 +323,7 @@
                 "Upload attempt with invalid MIME type: %s", file.mimetype
             )
             return jsonify({"error": "only PDF files are allowed"}), 415
-        if not file.filename.lower().endswith(".pdf"):
+        if not not file.filename.lower().endswith(".pdf"):
             inc_suspicious("upload_bad_extension")
             app.logger.warning(
                 "Upload attempt with invalid file extension: %s", file.filename

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:328 Upload attempt with invalid file extension: input.pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 415 == 201

E            +  where 415 = <WrapperTestResponse 39 bytes [415 UNSUPPORTED MEDIA TYPE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:328 Upload attempt with invalid file extension: watermarked.pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 415 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 415 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 23

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -332,7 +332,7 @@
 
         # Sanitize filename
         fname = secure_filename(file.filename)
-        if not fname:
+        if not not fname:
             app.logger.warning(
                 "Upload attempt with invalid filename: %s", file.filename
             )

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 29 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:336 Upload attempt with invalid filename: input.pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 29 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:336 Upload attempt with invalid filename: watermarked.pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 24

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -348,7 +348,7 @@
         try:
             # Check for path traversal attempts
             stored_path = (user_dir / stored_name).resolve()
-            if not str(stored_path).startswith(str(user_dir.resolve())):
+            if not not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
                 return jsonify({"error": "invalid path"}), 400

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 25 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:352 Upload attempt with invalid path: C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192728549425Z__input.pdf

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 400 == 201

E            +  where 400 = <WrapperTestResponse 25 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:352 Upload attempt with invalid path: C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192729606749Z__watermarked.pdf

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 400 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 25

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -403,7 +403,7 @@
             "id": int(row.id),
             "name": row.name,
             "creation": row.creation.isoformat()
-            if hasattr(row.creation, "isoformat")
+            if not hasattr(row.creation, "isoformat")
             else str(row.creation),
             "sha256": row.sha256_hex,
             "size": int(row.size),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 26

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -440,7 +440,7 @@
                 "id": int(r.id),
                 "name": r.name,
                 "creation": r.creation.isoformat()
-                if hasattr(r.creation, "isoformat")
+                if not hasattr(r.creation, "isoformat")
                 else str(r.creation),
                 "sha256": r.sha256_hex,
                 "size": int(r.size),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 27

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -455,7 +455,7 @@
     @require_auth
     def list_versions(document_id: int | None = None):
         # Input validation
-        if document_id is None:
+        if not document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 28

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -458,7 +458,7 @@
         if document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
-                document_id = int(document_id) if document_id else None
+                document_id = int(document_id) if not document_id else None
                 if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 29

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if not document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031458563050Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031459517386Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 30

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if not document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

...F.F...FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e3ada16812490f1bb: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 21.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 31

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -482,7 +482,7 @@
                     {"did": document_id, "uid": int(g.user["id"])},
                 ).first()
 
-                if not doc:
+                if not not doc:
                     app.logger.warning(
                         "Document not found or access denied for id=%s", document_id
                     )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041513367534Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041514725482Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 32

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -526,7 +526,7 @@
     def list_all_versions():
         try:
             # Validate user data from auth token
-            if not g.user or not g.user.get("id"):
+            if not not g.user or not g.user.get("id"):
                 app.logger.error("Missing user info in auth token")
                 return jsonify({"error": "Invalid authentication"}), 401

...F..F..FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 35 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:530 Missing user info in auth token

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eceb130736ddb771c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 401 == 200

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 23.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 33

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -572,7 +572,7 @@
     @require_auth
     def get_document(document_id: int | None = None):
         # Support both path param and ?id=/ ?documentid=
-        if document_id is None:
+        if not document_id is None:
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155452317866Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155453182960Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 34

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if not document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 400 == 404

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:446: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 404

2 failed, 12 passed, 22 warnings in 20.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 35

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -606,7 +606,7 @@
             ), 503
 
         # DonÔÇÖt leak whether a doc exists for another user
-        if not row:
+        if not not row:
             app.logger.warning(
                 "Document not found or access denied for id=%s", document_id
             )

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

>       resp_deletion = client.get("/api/get-document/2")

                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:445: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 2



    @app.get("/api/get-document")

    @app.get("/api/get-document/<int:document_id>")

    @require_auth

    def get_document(document_id: int | None = None):

        # Support both path param and ?id=/ ?documentid=

        if document_id is None:

            document_id = request.args.get("id") or request.args.get("documentid")

            try:

                document_id = int(document_id)

            except (TypeError, ValueError):

                app.logger.warning("Invalid document id in query")

                return jsonify({"error": "document id required"}), 400

    

        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:

            return jsonify({"error": "document id required"}), 400

    

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path, HEX(sha256) AS sha256_hex, size

                        FROM Documents

                        WHERE id = :id AND ownerid = :uid

                        LIMIT 1

                    """

                    ),

                    {"id": document_id, "uid": int(g.user["id"])},

                ).first()

        except Exception:

            app.logger.error(

                f"Database error in get_document: {document_id},{g.user['id']}"

            )

            inc_db_error("get_document")

            return jsonify(

                {"error": "An error occurred while fetching the document"}

            ), 503

    

        # DonÔÇÖt leak whether a doc exists for another user

        if not not row:

            app.logger.warning(

                "Document not found or access denied for id=%s", document_id

            )

            return jsonify({"error": "document not found"}), 404

    

        storage_root = app.config["STORAGE_DIR"].resolve()

>       file_path = Path(row.path)

                         ^^^^^^^^

E       AttributeError: 'NoneType' object has no attribute 'path'



server.py:616: AttributeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_delete_document_route - AttributeError: 'Non...

2 failed, 12 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 36

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -626,7 +626,7 @@
             )
             return jsonify({"error": "document path invalid"}), 500
 
-        if not resolved.exists():
+        if not not resolved.exists():
             app.logger.error("File missing on disk for document id=%s", document_id)
             return jsonify({"error": "file missing on disk"}), 410

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:630 File missing on disk for document id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 20.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 37

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -640,7 +640,7 @@
         try:
             # Quick PDF signature check
             head = f.read(5)
-            if head != b"%PDF-":
+            if not head != b"%PDF-":
                 f.close()
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:645 Invalid PDF signature for document id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 38

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -651,7 +651,7 @@
 
             # Prepare safe filename (preserve existing .pdf if present)
             name = (row.name or "document").strip().replace("\r", "").replace("\n", "")
-            if not name.lower().endswith(".pdf"):
+            if not not name.lower().endswith(".pdf"):
                 name = f"{name}.pdf"
 
             # Stat via the same FD to avoid TOCTOU

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 39

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -668,7 +668,7 @@
             )
 
             # Strong validator
-            if isinstance(row.sha256_hex, str) and row.sha256_hex:
+            if not isinstance(row.sha256_hex, str) and row.sha256_hex:
                 resp.set_etag(row.sha256_hex.lower())
 
             # Headers

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001341058201Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001341962369Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 40

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -693,7 +693,7 @@
     @app.get("/api/get-version/<link>")
     def get_version(link: str):
         # Accept both 32-char (RMAP session secrets) and 64-char (SHA-256 style) tokens
-        if not re.fullmatch(r"[0-9a-f]{32}|[0-9a-f]{64}", link):
+        if not not re.fullmatch(r"[0-9a-f]{32}|[0-9a-f]{64}", link):
             app.logger.warning("Invalid version link format: %s", link)
             return jsonify({"error": "document not found"}), 404

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 41

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -715,7 +715,7 @@
             inc_db_error("get_version")
             return jsonify({"error": "database error"}), 503
 
-        if not row:
+        if not not row:
             app.logger.warning("Version not found for link: %s", link)
             return jsonify({"error": "document not found"}), 404

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 42

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -727,7 +727,7 @@
             )
             return jsonify({"error": "document path invalid"}), 500
 
-        if not resolved.exists():
+        if not not resolved.exists():
             app.logger.error("File missing on disk for version link=%s", link)
             return jsonify({"error": "file missing on disk"}), 410

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174354348900Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174355336630Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 43

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -734,7 +734,7 @@
         try:
             with resolved.open("rb") as fh:
                 header = fh.read(5)
-                if header != b"%PDF-":
+                if not header != b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 44

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -749,7 +749,7 @@
             return jsonify({"error": "error serving file"}), 500
 
         download_name = (
-            row.link if row.link.lower().endswith(".pdf") else f"{row.link}.pdf"
+            row.link if not row.link.lower().endswith(".pdf") else f"{row.link}.pdf"
         )
         safe_download = download_name.replace("\r", "").replace("\n", "")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T181430250783Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T181431198463Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 45

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -781,7 +781,7 @@
     def _safe_resolve_under_storage(p: str, storage_root: Path) -> Path:
         storage_root = storage_root.resolve()
         fp = Path(p)
-        if not fp.is_absolute():
+        if not not fp.is_absolute():
             fp = storage_root / fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 46

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -785,7 +785,7 @@
             fp = storage_root / fp
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
-        if hasattr(fp, "is_relative_to"):
+        if not hasattr(fp, "is_relative_to"):
             if not fp.is_relative_to(storage_root):
                 raise RuntimeError(f"path {fp} escapes storage root {storage_root}")
         else:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 47

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -786,7 +786,7 @@
         fp = fp.resolve()
         # Python 3.12 has is_relative_to on Path
         if hasattr(fp, "is_relative_to"):
-            if not fp.is_relative_to(storage_root):
+            if not not fp.is_relative_to(storage_root):
                 raise RuntimeError(f"path {fp} escapes storage root {storage_root}")
         else:
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 48

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -803,7 +803,7 @@
     @require_auth
     def delete_document(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
-        if document_id in (None, ""):
+        if not document_id in (None, ""):
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:814 Document id required for deletion

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1ecc8f7d9d354609: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 49

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -810,7 +810,7 @@
                 or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )
 
-        if document_id is None:
+        if not document_id is None:
             app.logger.warning("Document id required for deletion")
             return jsonify({"error": "document id required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011457256916Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011458247966Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:814 Document id required for deletion

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

8 failed, 6 passed, 22 warnings in 19.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 50

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if not doc_id <= 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 51

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -845,7 +845,7 @@
             inc_db_error("delete_document_select")
             return jsonify({"error": "database error during delete"}), 503
 
-        if not row:
+        if not not row:
             # DonÔÇÖt reveal othersÔÇÖ docsÔÇöjust say not found
             app.logger.warning(
                 "Document not found or access denied for deletion id=%s", doc_id

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021910196648Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021911018089Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 18.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 52

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -859,7 +859,7 @@
         delete_error = None
         try:
             fp = _safe_resolve_under_storage(row.path, storage_root)
-            if fp.exists():
+            if not fp.exists():
                 try:
                     fp.unlink()
                     file_deleted = True

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:90: in write_binary

    new_stream.write(s)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 53

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -908,7 +908,7 @@
     @require_auth
     def create_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
-        if not document_id:
+        if not not document_id:
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:934 Missing document id in request

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e09be400c516ae99f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 54

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -930,7 +930,7 @@
 
         # validate input
         try:
-            if doc_id is None:
+            if not doc_id is None:
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:934 Missing document id in request

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ecfdb47fb8604bb98: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 55

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if not doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010213442695Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010214260537Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 56

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -939,7 +939,7 @@
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
-        if (
+        if not (
             not method
             or not intended_for
             or not isinstance(secret, str)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 63 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'method': 'robust-xmp', 'position': 'metadata-only', 'secret': 'secret'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 57

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -968,7 +968,7 @@
             app.logger.error("Database error fetching document %s", e)
             return jsonify({"error": "database error"}), 503
 
-        if not row:
+        if not not row:
             app.logger.warning(
                 "Document not found or access denied for watermarking id=%s", doc_id
             )

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

1 failed, 13 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 58

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -977,7 +977,7 @@
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
-        if not file_path.is_absolute():
+        if not not file_path.is_absolute():
             file_path = storage_root / file_path
         file_path = file_path.resolve()
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 59

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -985,7 +985,7 @@
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
             return jsonify({"error": "document path invalid"}), 500
-        if not file_path.exists():
+        if not not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154653527648Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154654444611Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 60

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if not applicable is False:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222420750216Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222421660649Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 61

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 44 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1026 Watermarking produced no output for document 1 using method robust-xmp

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 62

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1145,7 +1145,7 @@
     @require_auth
     def read_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
-        if not document_id:
+        if not not document_id:
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1169 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 63

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1165,7 +1165,7 @@
 
         # validate input
         try:
-            if doc_id is None:
+            if not doc_id is None:
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1169 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 64

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if not doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 65

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1174,7 +1174,7 @@
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
-        if not method or not isinstance(method, str) or not isinstance(key, str):
+        if not not method or not isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 41 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1178 Missing required fields for watermarking: {'id': 2, 'key': 'strong-password', 'method': 'overlay-watermark', 'position': 'metadata-only'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 66

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1198,7 +1198,7 @@
             )
             return jsonify({"error": "database error"}), 503
 
-        if not row:
+        if not not row:
             app.logger.warning(
                 "Document not found or access denied for watermark read id=%s", doc_id
             )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045320894755Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045321911208Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 67

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1207,7 +1207,7 @@
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()
         file_path = Path(row.path)
-        if not file_path.is_absolute():
+        if not not file_path.is_absolute():
             file_path = storage_root / file_path
         file_path = file_path.resolve()
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 68

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1215,7 +1215,7 @@
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
             return jsonify({"error": "document path invalid"}), 500
-        if not file_path.exists():
+        if not not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 410 == 201

E        +  where 410 = <WrapperTestResponse 33 bytes [410 GONE]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1219 File missing on disk for document id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 410 == 201

1 failed, 13 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 69

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1240,7 +1240,7 @@
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
-        if provided != token_required:
+        if not provided != token_required:
             return False
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 70

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1246,7 +1246,7 @@
 
     @app.get("/metrics")
     def metrics():
-        if not _is_authorized_metrics_request():
+        if not not _is_authorized_metrics_request():
             # Obscure existence a bit ÔÇô return 404 instead of 403 to casual scans
             app.logger.warning(
                 "Unauthorized metrics access attempt from %s", request.remote_addr

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041751675420Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041752661737Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 71

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1261,7 +1261,7 @@
 # WSGI entrypoint
 app = create_app()
 
-if __name__ == "__main__":
+if not __name__ == "__main__":
     port = int(os.environ.get("PORT", 5000))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")

timeout

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -59,7 +59,7 @@
     app.config["DB_PORT"] = int(os.environ.get("DB_PORT", "3306"))
     app.config["DB_NAME"] = os.environ.get("DB_NAME", "tatou")
 
-    app.config["STORAGE_DIR"].mkdir(parents=True, exist_ok=True)
+    app.config["STORAGE_DIR"].mkdir(parents=False, exist_ok=True)
     app.config["TESTING"] = os.environ.get("TESTING", False)
 
     # --- DB engine only (no Table metadata) ---

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -59,7 +59,7 @@
     app.config["DB_PORT"] = int(os.environ.get("DB_PORT", "3306"))
     app.config["DB_NAME"] = os.environ.get("DB_NAME", "tatou")
 
-    app.config["STORAGE_DIR"].mkdir(parents=True, exist_ok=True)
+    app.config["STORAGE_DIR"].mkdir(parents=True, exist_ok=False)
     app.config["TESTING"] = os.environ.get("TESTING", False)
 
     # --- DB engine only (no Table metadata) ---


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1262: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:62: in create_app

    app.config["STORAGE_DIR"].mkdir(parents=True, exist_ok=False)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\pathlib.py:1312: in mkdir

    os.mkdir(self, mode)

E   FileExistsError: [WinError 183] Impossibile creare un file, se il file esiste gi├á: 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T02:08:10+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:08:10+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T02:08:11+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:08:12+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - FileExistsError: [WinError 183] Impossibile crear...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -73,7 +73,7 @@
         eng = app.config.get("_ENGINE")
         if eng is None:
             try:
-                eng = create_engine(db_url(), pool_pre_ping=True, future=True)
+                eng = create_engine(db_url(), pool_pre_ping=False, future=True)
             except Exception as e:
                 app.logger.critical("Failed to initialize database engine: %s", e)
                 raise

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -73,7 +73,7 @@
         eng = app.config.get("_ENGINE")
         if eng is None:
             try:
-                eng = create_engine(db_url(), pool_pre_ping=True, future=True)
+                eng = create_engine(db_url(), pool_pre_ping=True, future=False)
             except Exception as e:
                 app.logger.critical("Failed to initialize database engine: %s", e)
                 raise

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:236 Database error in create_user: The 'future' parameter passed to create_engine() may only be set to True.

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:280 Database error in login: The 'future' parameter passed to create_engine() may only be set to True.

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150148419501Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:968 Database error fetching document The 'future' parameter passed to create_engine() may only be set to True.

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150149159267Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:844 DB delete error for doc id=2: The 'future' parameter passed to create_engine() may only be set to True.

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

ERROR    server:server.py:236 Database error in create_user: The 'future' parameter passed to create_engine() may only be set to True.

CRITICAL server:server.py:78 Failed to initialize database engine: The 'future' parameter passed to create_engine() may only be set to True.

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 18.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -175,7 +175,7 @@
         try:
             with get_engine().connect() as conn:
                 conn.execute(text("SELECT 1"))
-            db_ok = True
+            db_ok = False
         except Exception:
             db_ok = False
         return jsonify(

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e3f9ef1d24dd3c73e: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -191,7 +191,7 @@
             return False, "Invalid email format"
         if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
             return False, "Invalid login format"
-        return True, ""
+        return False, ""
 
     # POST /api/create-user {email, login, password}
     @app.post("/api/create-user")

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 13 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed:

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150432771776Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150433647396Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:213 User input validation failed: 

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -196,7 +196,7 @@
     # POST /api/create-user {email, login, password}
     @app.post("/api/create-user")
     def create_user():
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=False) or {}
         email = (payload.get("email") or "").strip().lower()
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -241,7 +241,7 @@
     # POST /api/login {login, password}
     @app.post("/api/login")
     def login():
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=False) or {}
         email = (payload.get("email") or "").strip()
         password = payload.get("password") or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -339,7 +339,7 @@
             return jsonify({"error": "invalid filename"}), 400
 
         user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
-        user_dir.mkdir(parents=True, exist_ok=True)
+        user_dir.mkdir(parents=False, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")
         final_name = request.form.get("name") or fname

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184013802261Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184014765713Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -339,7 +339,7 @@
             return jsonify({"error": "invalid filename"}), 400
 
         user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
-        user_dir.mkdir(parents=True, exist_ok=True)
+        user_dir.mkdir(parents=True, exist_ok=False)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")
         final_name = request.form.get("name") or fname

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:342: in upload_document

    user_dir.mkdir(parents=True, exist_ok=False)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = WindowsPath('C:/Users/franc/Documents/GitHub/softsec-tatou/server/src/storage/files/username')

mode = 511, parents = True, exist_ok = False



    def mkdir(self, mode=0o777, parents=False, exist_ok=False):

        """

        Create a new directory at this given path.

        """

        try:

>           os.mkdir(self, mode)

E           FileExistsError: [WinError 183] Impossibile creare un file, se il file esiste gi├á: 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username'



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\pathlib.py:1312: FileExistsError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:342: in upload_document

    user_dir.mkdir(parents=True, exist_ok=False)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = WindowsPath('C:/Users/franc/Documents/GitHub/softsec-tatou/server/src/storage/files/username')

mode = 511, parents = True, exist_ok = False



    def mkdir(self, mode=0o777, parents=False, exist_ok=False):

        """

        Create a new directory at this given path.

        """

        try:

>           os.mkdir(self, mode)

E           FileExistsError: [WinError 183] Impossibile creare un file, se il file esiste gi├á: 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username'



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\pathlib.py:1312: FileExistsError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - FileExistsError: [Wi...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - FileExistsError: [Win...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -389,7 +389,7 @@
                     {"id": did},
                 ).one()
         except Exception:
-            stored_path.unlink(missing_ok=True)
+            stored_path.unlink(missing_ok=False)
             app.logger.error(
                 "Database error inserting document path=%s user=%s",
                 stored_path,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8e18c6b9f246c844: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -759,7 +759,7 @@
                 mimetype="application/pdf",
                 as_attachment=False,
                 download_name=safe_download,
-                conditional=True,
+                conditional=False,
                 max_age=0,
                 last_modified=last_modified,
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -807,7 +807,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json and (request.get_json(silent=False) or {}).get("id"))
             )
 
         if document_id is None:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 13

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -862,7 +862,7 @@
             if fp.exists():
                 try:
                     fp.unlink()
-                    file_deleted = True
+                    file_deleted = False
                 except Exception as e:
                     delete_error = f"failed to delete file: {e}"
                     app.logger.warning(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.64s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 14

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -869,7 +869,7 @@
                         "Failed to delete file %s for doc id=%s: %s", fp, row.id, e
                     )
             else:
-                file_missing = True
+                file_missing = False
         except RuntimeError as e:
             # Path escapes storage root; refuse to touch the file
             delete_error = str(e)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 15

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -893,7 +893,7 @@
 
         return jsonify(
             {
-                "deleted": True,
+                "deleted": False,
                 "id": doc_id,
                 "file_deleted": file_deleted,
                 "file_missing": file_missing,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.91s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 16

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -912,7 +912,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json and (request.get_json(silent=False) or {}).get("id"))
             )
         try:
             doc_id = document_id

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.73s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 17

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -920,7 +920,7 @@
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=False) or {}
         # allow a couple of aliases for convenience
         method = payload.get("method")
         intended_for = payload.get("intended_for")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 18

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1043,7 +1043,7 @@
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
         dest_dir = file_path.parent / "watermarks"
-        dest_dir.mkdir(parents=True, exist_ok=True)
+        dest_dir.mkdir(parents=False, exist_ok=True)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
         dest_path = dest_dir / candidate

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054005167213Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054006071617Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 19

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1043,7 +1043,7 @@
         base_name = Path(row.name or file_path.name).stem
         intended_slug = secure_filename(intended_for)
         dest_dir = file_path.parent / "watermarks"
-        dest_dir.mkdir(parents=True, exist_ok=True)
+        dest_dir.mkdir(parents=True, exist_ok=False)
 
         candidate = f"{base_name}__{intended_slug}.pdf"
         dest_path = dest_dir / candidate

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1046: in create_watermark

    dest_dir.mkdir(parents=True, exist_ok=False)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = WindowsPath('C:/Users/franc/Documents/GitHub/softsec-tatou/server/src/storage/files/username/watermarks')

mode = 511, parents = True, exist_ok = False



    def mkdir(self, mode=0o777, parents=False, exist_ok=False):

        """

        Create a new directory at this given path.

        """

        try:

>           os.mkdir(self, mode)

E           FileExistsError: [WinError 183] Impossibile creare un file, se il file esiste gi├á: 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks'



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\pathlib.py:1312: FileExistsError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - FileExistsError: [W...

1 failed, 13 passed, 22 warnings in 21.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 20

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1089,7 +1089,7 @@
         except IntegrityError as ie:
             # This should be very rare due to SHA-256 usage, but handle it just in case
             try:
-                dest_path.unlink(missing_ok=True)
+                dest_path.unlink(missing_ok=False)
             except Exception as cleanup_error:
                 app.logger.warning(
                     f"Failed to cleanup file {dest_path}: {cleanup_error}"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 21

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1101,7 +1101,7 @@
             return jsonify({"error": "database error during version insert"}), 503
         except Exception:
             try:
-                dest_path.unlink(missing_ok=True)
+                dest_path.unlink(missing_ok=False)
             except Exception as cleanup_error:
                 app.logger.warning(
                     f"Failed to cleanup file {dest_path}: {cleanup_error}"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 22

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1149,7 +1149,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json and (request.get_json(silent=False) or {}).get("id"))
             )
         try:
             doc_id = document_id

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042051681109Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042052771290Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 23

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1157,7 +1157,7 @@
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=False) or {}
         # allow a couple of aliases for convenience
         method = payload.get("method")
         position = payload.get("position") or None

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e9f747ba8534438a8: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 21.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 24

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1242,7 +1242,7 @@
         provided = request.headers.get("X-Metrics-Token", "")
         if provided != token_required:
             return False
-        return True
+        return False
 
     @app.get("/metrics")
     def metrics():

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -60,7 +60,7 @@
     app.config["DB_NAME"] = os.environ.get("DB_NAME", "tatou")
 
     app.config["STORAGE_DIR"].mkdir(parents=True, exist_ok=True)
-    app.config["TESTING"] = os.environ.get("TESTING", False)
+    app.config["TESTING"] = os.environ.get("TESTING", True)
 
     # --- DB engine only (no Table metadata) ---
     def db_url() -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -177,7 +177,7 @@
                 conn.execute(text("SELECT 1"))
             db_ok = True
         except Exception:
-            db_ok = False
+            db_ok = True
         return jsonify(
             {"message": "The server is up and running.", "db_connected": db_ok}
         ), 200

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -186,7 +186,7 @@
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
         if len(email) > 320 or len(login) > 64:
-            return False, "Email or login too long"
+            return True, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"
         if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -188,7 +188,7 @@
         if len(email) > 320 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
-            return False, "Invalid email format"
+            return True, "Invalid email format"
         if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
             return False, "Invalid login format"
         return True, ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceFalseWithTrue, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -190,7 +190,7 @@
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"
         if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
-            return False, "Invalid login format"
+            return True, "Invalid login format"
         return True, ""
 
     # POST /api/create-user {email, login, password}

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e2e68a304639cafc8: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.85s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -265,7 +265,7 @@
                     is_valid = check_password_hash(row.hpassword, password)
                 else:
                     # Dummy check to maintain constant time
-                    is_valid = False
+                    is_valid = True
                     row = None
 
                 if not is_valid:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -660,7 +660,7 @@
             resp = send_file(
                 file_path,
                 mimetype="application/pdf",
-                as_attachment=False,
+                as_attachment=True,
                 download_name=name,
                 conditional=False,  # enables 304 if If-Modified-Since/Range handling
                 max_age=0,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceFalseWithTrue, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -662,7 +662,7 @@
                 mimetype="application/pdf",
                 as_attachment=False,
                 download_name=name,
-                conditional=False,  # enables 304 if If-Modified-Since/Range handling
+                conditional=True,  # enables 304 if If-Modified-Since/Range handling
                 max_age=0,
                 last_modified=st.st_mtime,
             )

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -757,7 +757,7 @@
             resp = send_file(
                 resolved,
                 mimetype="application/pdf",
-                as_attachment=False,
+                as_attachment=True,
                 download_name=safe_download,
                 conditional=True,
                 max_age=0,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceFalseWithTrue, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -854,7 +854,7 @@
 
         # Resolve and delete file (best effort)
         storage_root = Path(app.config["STORAGE_DIR"])
-        file_deleted = False
+        file_deleted = True
         file_missing = False
         delete_error = None
         try:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212327125482Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212328074291Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -855,7 +855,7 @@
         # Resolve and delete file (best effort)
         storage_root = Path(app.config["STORAGE_DIR"])
         file_deleted = False
-        file_missing = False
+        file_missing = True
         delete_error = None
         try:
             fp = _safe_resolve_under_storage(row.path, storage_root)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceFalseWithTrue, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -994,7 +994,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=position
             )
-            if applicable is False:
+            if applicable is True:
                 inc_watermark_failed(method, "applicability")
                 app.logger.info(
                     "Watermarking method %s not applicable for document %s",

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 22.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1241,7 +1241,7 @@
         token_required = os.environ.get("METRICS_TOKEN", "")
         provided = request.headers.get("X-Metrics-Token", "")
         if provided != token_required:
-            return False
+            return True
         return True
 
     @app.get("/metrics")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceAndWithOr, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -311,7 +311,7 @@
         start_db = time.time()
         # Validate file size
         MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
-        if file.content_length and file.content_length > MAX_FILE_SIZE:
+        if file.content_length or file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
             return jsonify({"error": "file too large"}), 413

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceAndWithOr, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -668,7 +668,7 @@
             )
 
             # Strong validator
-            if isinstance(row.sha256_hex, str) and row.sha256_hex:
+            if isinstance(row.sha256_hex, str) or row.sha256_hex:
                 resp.set_etag(row.sha256_hex.lower())
 
             # Headers

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceAndWithOr, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -807,7 +807,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json or (request.get_json(silent=True) or {}).get("id"))
             )
 
         if document_id is None:

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

        resp_deletion = client.get("/api/get-document/2")

>       assert resp_deletion.status_code == 404

E       assert 200 == 404

E        +  where 200 = <WrapperTestResponse streamed [200 OK]>.status_code



..\test\test_api.py:446: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 200 == 404

1 failed, 13 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceAndWithOr, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -912,7 +912,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json or (request.get_json(silent=True) or {}).get("id"))
             )
         try:
             doc_id = document_id

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171115360876Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171116245634Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceAndWithOr, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1149,7 +1149,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json or (request.get_json(silent=True) or {}).get("id"))
             )
         try:
             doc_id = document_id

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153448399637Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153449329253Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 and len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041021045964Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041021975581Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -196,7 +196,7 @@
     # POST /api/create-user {email, login, password}
     @app.post("/api/create-user")
     def create_user():
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=True) and {}
         email = (payload.get("email") or "").strip().lower()
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033954314842Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033955277621Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -197,7 +197,7 @@
     @app.post("/api/create-user")
     def create_user():
         payload = request.get_json(silent=True) or {}
-        email = (payload.get("email") or "").strip().lower()
+        email = (payload.get("email") and "").strip().lower()
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""
         start_db = time.time()

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'user@email.se', 'login': 'username', 'password': 'password'}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185234343691Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185235254606Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'service@rmap.su', 'login': 'rmap_service', 'password': 'password_rmap'}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -198,7 +198,7 @@
     def create_user():
         payload = request.get_json(silent=True) or {}
         email = (payload.get("email") or "").strip().lower()
-        login = (payload.get("login") or "").strip()
+        login = (payload.get("login") and "").strip()
         password = payload.get("password") or ""
         start_db = time.time()
         if not email or not login or not password:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'user@email.se', 'login': 'username', 'password': 'password'}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210736552917Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210737549352Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'service@rmap.su', 'login': 'rmap_service', 'password': 'password_rmap'}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 21.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -199,7 +199,7 @@
         payload = request.get_json(silent=True) or {}
         email = (payload.get("email") or "").strip().lower()
         login = (payload.get("login") or "").strip()
-        password = payload.get("password") or ""
+        password = payload.get("password") and ""
         start_db = time.time()
         if not email or not login or not password:
             app.logger.warning("Missing fields in user creation: %s", payload)

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'user@email.se', 'login': 'username', 'password': 'password'}

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161041580531Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161042536521Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'email': 'service@rmap.su', 'login': 'rmap_service', 'password': 'password_rmap'}

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 400 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -201,7 +201,7 @@
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""
         start_db = time.time()
-        if not email or not login or not password:
+        if not email and not login or not password:
             app.logger.warning("Missing fields in user creation: %s", payload)
             return jsonify({"error": "email, login, and password are required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -201,7 +201,7 @@
         login = (payload.get("login") or "").strip()
         password = payload.get("password") or ""
         start_db = time.time()
-        if not email or not login or not password:
+        if not email or not login and not password:
             app.logger.warning("Missing fields in user creation: %s", payload)
             return jsonify({"error": "email, login, and password are required"}), 400

.F.F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

        assert resp.status_code == 201  # Endpoint should exist

        assert resp.is_json

        #check types

        assert isinstance(resp_data.get("id"), int)

        assert isinstance(resp_data.get("login"), str)

        assert isinstance(resp_data.get("email"), str)

        #check values are what we submitted

        assert resp_data.get("login") == parameters["login"]

        assert resp_data.get("email") == parameters["email"]

    

        #Test with missing parameters

        # Missing email

        resp = client.post("/api/create-user",json={

                    "login": "username",

                    "password": "password",

                },  # pragma: allowlist secret

        )

        assert resp.status_code == 400

    

        # Missing login

        resp = client.post("/api/create-user",

                json={"email": "user@email.se", "password": "password"},

        )

        assert resp.status_code == 400

    

        # Missing password

        resp = client.post(

        "/api/create-user", json={"email": "user@email.se", "login": "username"}

        )

>       assert resp.status_code == 400

E       assert 409 == 400

E        +  where 409 = <WrapperTestResponse streamed [409 CONFLICT]>.status_code



..\test\test_api.py:102: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'login': 'username', 'password': 'password'}

WARNING  server:server.py:213 User input validation failed: Invalid login format

WARNING  server:server.py:231 Attempt to create duplicate user: email=user@email.se, login=username

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0f6eff102ee31692: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 409 == 400

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 19.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -241,7 +241,7 @@
     # POST /api/login {login, password}
     @app.post("/api/login")
     def login():
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=True) and {}
         email = (payload.get("email") or "").strip()
         password = payload.get("password") or ""

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 44 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {}

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061509912780Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061510838137Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 400 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -242,7 +242,7 @@
     @app.post("/api/login")
     def login():
         payload = request.get_json(silent=True) or {}
-        email = (payload.get("email") or "").strip()
+        email = (payload.get("email") and "").strip()
         password = payload.get("password") or ""
 
         if not email or not password:

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 44 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {'email': 'user@email.se', 'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -243,7 +243,7 @@
     def login():
         payload = request.get_json(silent=True) or {}
         email = (payload.get("email") or "").strip()
-        password = payload.get("password") or ""
+        password = payload.get("password") and ""
 
         if not email or not password:
             app.logger.warning("Missing fields in login attempt: %s", payload)

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 44 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {'email': 'user@email.se', 'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -245,7 +245,7 @@
         email = (payload.get("email") or "").strip()
         password = payload.get("password") or ""
 
-        if not email or not password:
+        if not email and not password:
             app.logger.warning("Missing fields in login attempt: %s", payload)
             return jsonify({"error": "email and password are required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234854386391Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234855322823Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -304,7 +304,7 @@
             return jsonify({"error": "file is required (multipart/form-data)"}), 400
 
         file = request.files["file"]
-        if not file or file.filename == "":
+        if not file and file.filename == "":
             app.logger.warning("Upload attempt with empty filename")
             return jsonify({"error": "empty filename"}), 400

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034629918034Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034630952304Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -342,7 +342,7 @@
         user_dir.mkdir(parents=True, exist_ok=True)
 
         ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")
-        final_name = request.form.get("name") or fname
+        final_name = request.form.get("name") and fname
         stored_name = f"{ts}__{fname}"
 
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201807093657Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201808231387Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 13

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -456,7 +456,7 @@
     def list_versions(document_id: int | None = None):
         # Input validation
         if document_id is None:
-            document_id = request.args.get("id") or request.args.get("documentid")
+            document_id = request.args.get("id") and request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
                 if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 14

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None and document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 15

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 0 and document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225443509858Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225444475161Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 16

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None and document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.93s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 17

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 and document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031006552374Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031007448680Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 18

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -526,7 +526,7 @@
     def list_all_versions():
         try:
             # Validate user data from auth token
-            if not g.user or not g.user.get("id"):
+            if not g.user and not g.user.get("id"):
                 app.logger.error("Missing user info in auth token")
                 return jsonify({"error": "Invalid authentication"}), 401

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173829078015Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173830022621Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 19

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -573,7 +573,7 @@
     def get_document(document_id: int | None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:
-            document_id = request.args.get("id") or request.args.get("documentid")
+            document_id = request.args.get("id") and request.args.get("documentid")
             try:
                 document_id = int(document_id)
             except (TypeError, ValueError):

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:580 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 20.54s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 20

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None and document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 21

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 0 and document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 22

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -650,7 +650,7 @@
             f.seek(0)
 
             # Prepare safe filename (preserve existing .pdf if present)
-            name = (row.name or "document").strip().replace("\r", "").replace("\n", "")
+            name = (row.name and "document").strip().replace("\r", "").replace("\n", "")
             if not name.lower().endswith(".pdf"):
                 name = f"{name}.pdf"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 23

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -806,7 +806,7 @@
         if document_id in (None, ""):
             document_id = (
                 request.args.get("id")
-                or request.args.get("documentid")
+                and request.args.get("documentid")
                 or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 24

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -807,7 +807,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                and (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )
 
         if document_id is None:

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:814 Document id required for deletion

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 26.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 25

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -807,7 +807,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json and (request.get_json(silent=True) and {}).get("id"))
             )
 
         if document_id is None:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:814 Document id required for deletion

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e70cdb33a21ad7f3d: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 26

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 0 and doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 27

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -911,7 +911,7 @@
         if not document_id:
             document_id = (
                 request.args.get("id")
-                or request.args.get("documentid")
+                and request.args.get("documentid")
                 or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )
         try:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023826001639Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023826955094Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 28

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -912,7 +912,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                and (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )
         try:
             doc_id = document_id

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222807693015Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:934 Missing document id in request

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222808544552Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 29

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -912,7 +912,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json and (request.get_json(silent=True) and {}).get("id"))
             )
         try:
             doc_id = document_id

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:934 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 30

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -920,7 +920,7 @@
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=True) and {}
         # allow a couple of aliases for convenience
         method = payload.get("method")
         intended_for = payload.get("intended_for")

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 63 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:948 Missing required fields for watermarking: {}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 31

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -924,7 +924,7 @@
         # allow a couple of aliases for convenience
         method = payload.get("method")
         intended_for = payload.get("intended_for")
-        position = payload.get("position") or None
+        position = payload.get("position") and None
         secret = payload.get("secret")
         key = payload.get("key")

...F.....F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

>       assert isinstance(data.get("position"), str)

E       AssertionError: assert False

E        +  where False = isinstance(None, str)

E        +    where None = <built-in method get of dict object at 0x000002A111761E40>('position')

E        +      where <built-in method get of dict object at 0x000002A111761E40> = {'documentid': 1, 'filename': 'My File__Mickey_Mouse.pdf', 'id': 1, 'intended_for': 'Mickey Mouse', ...}.get



..\test\test_api.py:330: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - AssertionError: ass...

2 failed, 12 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 32

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 and doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043031432502Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043032790085Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 21.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 33

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -941,7 +941,7 @@
             return jsonify({"error": "document_id (int) is required"}), 400
         if (
             not method
-            or not intended_for
+            and not intended_for
             or not isinstance(secret, str)
             or not isinstance(key, str)
         ):

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

        assert resp.status_code == 201

        #Missing key

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing secret

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                         "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing recipient

>       resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret",  "id": 1})



..\test\test_api.py:373: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1044: in create_watermark

    intended_slug = secure_filename(intended_for)

                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



filename = None



    def secure_filename(filename: str) -> str:

        r"""Pass it a filename and it will return a secure version of it.  This

        filename can then safely be stored on a regular file system and passed

        to :func:`os.path.join`.  The filename returned is an ASCII only string

        for maximum portability.

    

        On windows systems the function also makes sure that the file is not

        named after one of the special device files.

    

        >>> secure_filename("My cool movie.mov")

        'My_cool_movie.mov'

        >>> secure_filename("../../../etc/passwd")

        'etc_passwd'

        >>> secure_filename('i contain cool \xfcml\xe4uts.txt')

        'i_contain_cool_umlauts.txt'

    

        The function might return an empty filename.  It's your responsibility

        to ensure that the filename is unique and that you abort or

        generate a random filename if the function returned an empty one.

    

        .. versionadded:: 0.5

    

        :param filename: the filename to secure

        """

>       filename = unicodedata.normalize("NFKD", filename)

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: normalize() argument 2 must be str, not None



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:219: TypeError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: None. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'method': 'robust-xmp', 'position': 'metadata-only', 'secret': 'secret'}

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'method': 'robust-xmp', 'position': 'metadata-only'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: normaliz...

1 failed, 13 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 34

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -942,7 +942,7 @@
         if (
             not method
             or not intended_for
-            or not isinstance(secret, str)
+            and not isinstance(secret, str)
             or not isinstance(key, str)
         ):
             app.logger.warning("Missing required fields for watermarking: %s", payload)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

        assert resp.status_code == 201

        #Missing key

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing secret

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                         "intended_for":"Mickey Mouse", "id": 1})

>       assert resp.status_code == 400

E       assert 500 == 400

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:371: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'method': 'robust-xmp', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: 'NoneType' object has no attribute 'strip'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 400

1 failed, 13 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 35

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -943,7 +943,7 @@
             not method
             or not intended_for
             or not isinstance(secret, str)
-            or not isinstance(key, str)
+            and not isinstance(key, str)
         ):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

        assert resp.status_code == 201

        #Missing key

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

>       assert resp.status_code == 400

E       assert 500 == 400

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:367: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: 'NoneType' object has no attribute 'strip'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 400

1 failed, 13 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 36

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) and len(wm_bytes) == 0:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 37

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1040,7 +1040,7 @@
             return jsonify({"error": "watermarking failed"}), 500
 
         # build destination file name: "<original_name>__<intended_to>.pdf"
-        base_name = Path(row.name or file_path.name).stem
+        base_name = Path(row.name and file_path.name).stem
         intended_slug = secure_filename(intended_for)
         dest_dir = file_path.parent / "watermarks"
         dest_dir.mkdir(parents=True, exist_ok=True)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 38

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1081,7 +1081,7 @@
                         "intended_for": intended_for,
                         "secret": secret,
                         "method": method,
-                        "position": position or "",
+                        "position": position and "",
                         "path": str(dest_path),
                     },
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 39

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1148,7 +1148,7 @@
         if not document_id:
             document_id = (
                 request.args.get("id")
-                or request.args.get("documentid")
+                and request.args.get("documentid")
                 or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 40

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1149,7 +1149,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                and (request.is_json and (request.get_json(silent=True) or {}).get("id"))
             )
         try:
             doc_id = document_id

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1169 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 41

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1149,7 +1149,7 @@
             document_id = (
                 request.args.get("id")
                 or request.args.get("documentid")
-                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))
+                or (request.is_json and (request.get_json(silent=True) and {}).get("id"))
             )
         try:
             doc_id = document_id

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1169 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 21.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 42

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1157,7 +1157,7 @@
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        payload = request.get_json(silent=True) or {}
+        payload = request.get_json(silent=True) and {}
         # allow a couple of aliases for convenience
         method = payload.get("method")
         position = payload.get("position") or None

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 41 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1178 Missing required fields for watermarking: {}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 43

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1160,7 +1160,7 @@
         payload = request.get_json(silent=True) or {}
         # allow a couple of aliases for convenience
         method = payload.get("method")
-        position = payload.get("position") or None
+        position = payload.get("position") and None
         key = payload.get("key")
 
         # validate input

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("secret"), str)

        assert isinstance(data.get("method"), str)

>       assert isinstance(data.get("position"), str)

E       AssertionError: assert False

E        +  where False = isinstance(None, str)

E        +    where None = <built-in method get of dict object at 0x0000021127C1D700>('position')

E        +      where <built-in method get of dict object at 0x0000021127C1D700> = {'documentid': 2, 'method': 'overlay-watermark', 'position': None, 'secret': 'hidden-example-value'}.get



..\test\test_api.py:406: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - AssertionError: asser...

1 failed, 13 passed, 22 warnings in 21.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 44

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 0 and doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 45

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1174,7 +1174,7 @@
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
-        if not method or not isinstance(method, str) or not isinstance(key, str):
+        if not method and not isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 46

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1174,7 +1174,7 @@
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
-        if not method or not isinstance(method, str) or not isinstance(key, str):
+        if not method or not isinstance(method, str) and not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -39,7 +39,7 @@
         from rmap_handler import RMAPHandler as _RMAPHandler  # type: ignore
 
         RMAPHandler = _RMAPHandler
-    except Exception:  # pragma: no cover - degrade gracefully if missing
+    except CosmicRayTestingException:  # pragma: no cover - degrade gracefully if missing
         RMAPHandler = None  # type: ignore

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -74,7 +74,7 @@
         if eng is None:
             try:
                 eng = create_engine(db_url(), pool_pre_ping=True, future=True)
-            except Exception as e:
+            except CosmicRayTestingException as e:
                 app.logger.critical("Failed to initialize database engine: %s", e)
                 raise
             app.config["_ENGINE"] = eng

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -84,7 +84,7 @@
     if RMAPHandler is not None:
         try:
             RMAPHandler(app, str(app.config["STORAGE_DIR"]), get_engine)
-        except Exception as e:  # pragma: no cover - defensive; don't fail app
+        except CosmicRayTestingException as e:  # pragma: no cover - defensive; don't fail app
             app.logger.warning("RMAP initialization failed (continuing): %s", e)
 
     # --- Helpers ---

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -109,7 +109,7 @@
                 data = _serializer().loads(
                     token, max_age=app.config["TOKEN_TTL_SECONDS"]
                 )
-            except SignatureExpired:
+            except CosmicRayTestingException:
                 return _auth_error("Token expired")
             except BadSignature:
                 return _auth_error("Invalid token")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -111,7 +111,7 @@
                 )
             except SignatureExpired:
                 return _auth_error("Token expired")
-            except BadSignature:
+            except CosmicRayTestingException:
                 return _auth_error("Invalid token")
             g.user = {
                 "id": int(data["uid"]),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -143,7 +143,7 @@
                 cl = request.content_length
                 if cl is not None:
                     observe_request_size(request.method, route, cl)
-            except Exception as exc:  # pragma: no cover - soft fail
+            except CosmicRayTestingException as exc:  # pragma: no cover - soft fail
                 app.logger.warning("Request size capture failed: %s", exc)
         except Exception as exc:  # pragma: no cover - defensive
             app.logger.warning("before_request instrumentation failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -145,7 +145,7 @@
                     observe_request_size(request.method, route, cl)
             except Exception as exc:  # pragma: no cover - soft fail
                 app.logger.warning("Request size capture failed: %s", exc)
-        except Exception as exc:  # pragma: no cover - defensive
+        except CosmicRayTestingException as exc:  # pragma: no cover - defensive
             app.logger.warning("before_request instrumentation failed: %s", exc)
 
     @app.after_request  # type: ignore

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191145364017Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191146301995Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -156,7 +156,7 @@
                 dur = time.time() - start
                 route = request.url_rule.rule if request.url_rule else request.path
                 record_request(request.method, route, resp.status_code, dur)
-        except Exception as exc:  # pragma: no cover - defensive
+        except CosmicRayTestingException as exc:  # pragma: no cover - defensive
             app.logger.warning("after_request instrumentation failed: %s", exc)
         return resp

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -176,7 +176,7 @@
             with get_engine().connect() as conn:
                 conn.execute(text("SELECT 1"))
             db_ok = True
-        except Exception:
+        except CosmicRayTestingException:
             db_ok = False
         return jsonify(
             {"message": "The server is up and running.", "db_connected": db_ok}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -227,7 +227,7 @@
                     {"id": uid},
                 ).one()
             observe_db_latency("create_user", time.time() - start_db)
-        except IntegrityError:
+        except CosmicRayTestingException:
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -232,7 +232,7 @@
                 "Attempt to create duplicate user: email=%s, login=%s", email, login
             )
             return jsonify({"error": "email or login already exists"}), 409
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("Database error in create_user: %s", e)
             return jsonify({"error": "database error"}), 503

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -276,7 +276,7 @@
                     inc_login_failure("invalid_credentials")
                     return jsonify({"error": "invalid credentials"}), 401
 
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("Database error in login: %s", e)
             inc_db_error("login_select")
             return jsonify({"error": "An error occurred"}), 503

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ea989e79a57fc48fb: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 22.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -353,7 +353,7 @@
                 return jsonify({"error": "invalid path"}), 400
 
             file.save(stored_path)
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("File save error: %s", e)
             return jsonify({"error": "failed to save file"}), 500

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 13

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -388,7 +388,7 @@
                     ),
                     {"id": did},
                 ).one()
-        except Exception:
+        except CosmicRayTestingException:
             stored_path.unlink(missing_ok=True)
             app.logger.error(
                 "Database error inserting document path=%s user=%s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 14

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -428,7 +428,7 @@
                     ),
                     {"uid": int(g.user["id"])},
                 ).all()
-        except Exception:
+        except CosmicRayTestingException:
             app.logger.error(
                 "Database error in list_documents for user=%s", g.user["id"]
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 15

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -462,7 +462,7 @@
                 if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
-            except (TypeError, ValueError):
+            except (CosmicRayTestingException, ValueError):
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e07a751c98e6e9e30: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.70s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 16

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -462,7 +462,7 @@
                 if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
-            except (TypeError, ValueError):
+            except (TypeError, CosmicRayTestingException):
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 17

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -500,7 +500,7 @@
                     """),
                     {"did": document_id, "uid": int(g.user["id"])},
                 ).all()
-        except Exception:
+        except CosmicRayTestingException:
             app.logger.error(
                 f"Database error in list_versions: {document_id},{g.user['id']}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 18

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -544,7 +544,7 @@
                     ),
                     {"uid": int(g.user["id"])},
                 ).all()
-        except ValueError:
+        except CosmicRayTestingException:
             app.logger.error("Invalid user ID in auth token")
             return jsonify({"error": "Authentication error"}), 401
         except Exception:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 19

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -547,7 +547,7 @@
         except ValueError:
             app.logger.error("Invalid user ID in auth token")
             return jsonify({"error": "Authentication error"}), 401
-        except Exception:
+        except CosmicRayTestingException:
             app.logger.error(
                 "Database error in list_all_versions for user=%s", g.user["id"]
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 20

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -576,7 +576,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id)
-            except (TypeError, ValueError):
+            except (CosmicRayTestingException, ValueError):
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020933726038Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020934658199Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 21

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -576,7 +576,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id)
-            except (TypeError, ValueError):
+            except (TypeError, CosmicRayTestingException):
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



document_id = None



    @app.get("/api/get-document")

    @app.get("/api/get-document/<int:document_id>")

    @require_auth

    def get_document(document_id: int | None = None):

        # Support both path param and ?id=/ ?documentid=

        if document_id is None:

            document_id = request.args.get("id") or request.args.get("documentid")

            try:

>               document_id = int(document_id)

                              ^^^^^^^^^^^^^^^^

E               TypeError: int() argument must be a string, a bytes-like object or a real number, not 'NoneType'



server.py:578: TypeError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

        assert is_pdf

        assert is_inline

    

        #Test with no parameters

>       resp = client.get("/api/get-document")

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:286: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = None



    @app.get("/api/get-document")

    @app.get("/api/get-document/<int:document_id>")

    @require_auth

    def get_document(document_id: int | None = None):

        # Support both path param and ?id=/ ?documentid=

        if document_id is None:

            document_id = request.args.get("id") or request.args.get("documentid")

            try:

                document_id = int(document_id)

>           except (TypeError, CosmicRayTestingException):

                               ^^^^^^^^^^^^^^^^^^^^^^^^^

E           NameError: name 'CosmicRayTestingException' is not defined



server.py:579: NameError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - NameError: name 'Cosmic...

1 failed, 13 passed, 22 warnings in 20.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 22

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -596,7 +596,7 @@
                     ),
                     {"id": document_id, "uid": int(g.user["id"])},
                 ).first()
-        except Exception:
+        except CosmicRayTestingException:
             app.logger.error(
                 f"Database error in get_document: {document_id},{g.user['id']}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 23

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -619,7 +619,7 @@
         try:
             resolved = file_path.resolve()
             resolved.relative_to(storage_root)
-        except Exception:
+        except CosmicRayTestingException:
             # Path looks suspicious or outside storage
             app.logger.warning(
                 "Rejected document path for id %s: %s", document_id, row.path

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 24

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -633,7 +633,7 @@
         # TOCTOU-safe open and validation
         try:
             f = open(resolved, "rb")
-        except OSError:
+        except CosmicRayTestingException:
             app.logger.error("File missing on disk for document id=%s", document_id)
             return jsonify({"error": "file missing on disk"}), 410

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 25

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -681,7 +681,7 @@
             )
 
             return resp
-        except Exception as e:
+        except CosmicRayTestingException as e:
             f.close()
             # Log error and return generic message
             app.logger.error(

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235158263733Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235159147429Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 26

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -710,7 +710,7 @@
                     ),
                     {"link": link},
                 ).first()
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("Database error in get_version: %s", e)
             inc_db_error("get_version")
             return jsonify({"error": "database error"}), 503

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 27

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -721,7 +721,7 @@
 
         try:
             resolved = _safe_resolve_under_storage(row.path, app.config["STORAGE_DIR"])
-        except Exception as exc:
+        except CosmicRayTestingException as exc:
             app.logger.warning(
                 "Rejected version path for link %s: %s (%s)", link, row.path, exc
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 28

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -741,7 +741,7 @@
                     return jsonify({"error": "document not available"}), 415
                 fh.seek(0)
                 last_modified = os.fstat(fh.fileno()).st_mtime
-        except OSError:
+        except CosmicRayTestingException:
             app.logger.error("File missing on disk for version link=%s", link)
             return jsonify({"error": "file missing on disk"}), 410
         except Exception as e:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 29

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -744,7 +744,7 @@
         except OSError:
             app.logger.error("File missing on disk for version link=%s", link)
             return jsonify({"error": "file missing on disk"}), 410
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("Error inspecting version file for %s: %s", link, e)
             return jsonify({"error": "error serving file"}), 500

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 30

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -763,7 +763,7 @@
                 max_age=0,
                 last_modified=last_modified,
             )
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("Error serving version %s: %s", link, e)
             return jsonify({"error": "error serving file"}), 500

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 31

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -791,7 +791,7 @@
         else:
             try:
                 fp.relative_to(storage_root)
-            except ValueError:
+            except CosmicRayTestingException:
                 raise RuntimeError(
                     f"path {fp} escapes storage root {storage_root}"
                 ) from None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 32

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -816,7 +816,7 @@
 
         try:
             doc_id = int(document_id)
-        except (TypeError, ValueError):
+        except (CosmicRayTestingException, ValueError):
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T140942720599Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T140943747891Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 20.53s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 33

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -816,7 +816,7 @@
 
         try:
             doc_id = int(document_id)
-        except (TypeError, ValueError):
+        except (TypeError, CosmicRayTestingException):
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 34

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -840,7 +840,7 @@
                     ),
                     {"id": doc_id, "owner": owner_id},
                 ).first()
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("DB delete error for doc id=%s: %s", doc_id, e)
             inc_db_error("delete_document_select")
             return jsonify({"error": "database error during delete"}), 503

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.73s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 35

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -863,7 +863,7 @@
                 try:
                     fp.unlink()
                     file_deleted = True
-                except Exception as e:
+                except CosmicRayTestingException as e:
                     delete_error = f"failed to delete file: {e}"
                     app.logger.warning(
                         "Failed to delete file %s for doc id=%s: %s", fp, row.id, e

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 36

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -870,7 +870,7 @@
                     )
             else:
                 file_missing = True
-        except RuntimeError as e:
+        except CosmicRayTestingException as e:
             # Path escapes storage root; refuse to touch the file
             delete_error = str(e)
             app.logger.error("Path safety check failed for doc id=%s: %s", row.id, e)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173208265515Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173209183503Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 37

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -886,7 +886,7 @@
                     text("DELETE FROM Documents WHERE id = :id AND ownerid = :owner"),
                     {"id": doc_id, "owner": owner_id},
                 )
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("DB delete error for doc id=%s: %s", doc_id, e)
             inc_db_error("delete_document_delete")
             return jsonify({"error": "database error during delete"}), 503

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 38

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -916,7 +916,7 @@
             )
         try:
             doc_id = document_id
-        except (TypeError, ValueError):
+        except (CosmicRayTestingException, ValueError):
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061116137476Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061117184046Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 39

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -916,7 +916,7 @@
             )
         try:
             doc_id = document_id
-        except (TypeError, ValueError):
+        except (TypeError, CosmicRayTestingException):
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400

...F.....FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

4 failed, 10 passed, 22 warnings in 22.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 40

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -936,7 +936,7 @@
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
-        except (TypeError, ValueError):
+        except (CosmicRayTestingException, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
         if (

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 41

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -936,7 +936,7 @@
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
-        except (TypeError, ValueError):
+        except (TypeError, CosmicRayTestingException):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
         if (

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 42

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -964,7 +964,7 @@
                     ),
                     {"id": doc_id, "owner": int(g.user["id"])},
                 ).first()
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error("Database error fetching document %s", e)
             return jsonify({"error": "database error"}), 503

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 43

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -982,7 +982,7 @@
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)
-        except ValueError:
+        except CosmicRayTestingException:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
             return jsonify({"error": "document path invalid"}), 500
         if not file_path.exists():

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 44

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1002,7 +1002,7 @@
                     doc_id,
                 )
                 return jsonify({"error": "watermarking method not applicable"}), 400
-        except Exception as e:
+        except CosmicRayTestingException as e:
             inc_watermark_failed(method, "applicability_exception")
             app.logger.error(
                 "Watermark applicability check failed for document %s: %s", doc_id, e

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



method = 'watermarkmethod'



    def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:

        """Resolve a method from a string name or pass-through an instance.

    

        Raises

        ------

        KeyError

            If ``method`` is a string not present in :data:`METHODS`.

        """

        if isinstance(method, WatermarkingMethod):

            return method

        try:

>           return METHODS[method]

                   ^^^^^^^^^^^^^^^

E           KeyError: 'watermarkmethod'



watermarking_utils.py:79: KeyError



The above exception was the direct cause of the following exception:



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

>           applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )



server.py:994: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

watermarking_utils.py:112: in is_watermarking_applicable

    m = get_method(method)

        ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



method = 'watermarkmethod'



    def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:

        """Resolve a method from a string name or pass-through an instance.

    

        Raises

        ------

        KeyError

            If ``method`` is a string not present in :data:`METHODS`.

        """

        if isinstance(method, WatermarkingMethod):

            return method

        try:

            return METHODS[method]

        except KeyError as exc:

>           raise KeyError(

                f"Unknown watermarking method: {method!r}. Known: {sorted(METHODS)}"

            ) from exc

E           KeyError: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"



watermarking_utils.py:81: KeyError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

>       resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})



..\test\test_api.py:344: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

>       except CosmicRayTestingException as e:

               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       NameError: name 'CosmicRayTestingException' is not defined



server.py:1005: NameError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - NameError: name 'Co...

1 failed, 13 passed, 22 warnings in 20.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 45

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1029,7 +1029,7 @@
                     method,
                 )
                 return jsonify({"error": "watermarking produced no output"}), 500
-        except Exception as e:
+        except CosmicRayTestingException as e:
             inc_watermark_failed(method, "exception")
             app.logger.error(
                 "Watermarking failed for document %s using method %s: %s",

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e35662a3600e8b7eb: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 46

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1052,7 +1052,7 @@
         try:
             with dest_path.open("wb") as f:
                 f.write(wm_bytes)
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error(
                 "Failed to write watermarked file %s for document %s: %s",
                 dest_path,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

        dest_path = dest_dir / candidate

    

        # write bytes

        try:

            with dest_path.open("wb") as f:

>               f.write(wm_bytes)

E               OSError: [Errno 28] No space left on device



server.py:1054: OSError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

        dest_path = dest_dir / candidate

    

        # write bytes

        try:

            with dest_path.open("wb") as f:

                f.write(wm_bytes)

>       except CosmicRayTestingException as e:

               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       NameError: name 'CosmicRayTestingException' is not defined



server.py:1055: NameError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e79c08b104483925c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - NameError: name 'Co...

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 47

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1086,7 +1086,7 @@
                     },
                 )
                 vid = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())
-        except IntegrityError as ie:
+        except CosmicRayTestingException as ie:
             # This should be very rare due to SHA-256 usage, but handle it just in case
             try:
                 dest_path.unlink(missing_ok=True)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



self = <sqlalchemy.engine.base.Connection object at 0x00000235B9E95100>

dialect = <sqlalchemy.dialects.mysql.pymysql.MySQLDialect_pymysql object at 0x00000235B9E1A090>

context = <sqlalchemy.dialects.mysql.mysqldb.MySQLExecutionContext_mysqldb object at 0x00000235B9DD8440>

statement = <sqlalchemy.dialects.mysql.mysqldb.MySQLCompiler_mysqldb object at 0x00000235B9E2BF80>

parameters = [{'documentid': 1, 'intended_for': 'Mickey Mouse', 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'method': 'robust-xmp', ...}]



    def _exec_single_context(

        self,

        dialect: Dialect,

        context: ExecutionContext,

        statement: Union[str, Compiled],

        parameters: Optional[_AnyMultiExecuteParams],

    ) -> CursorResult[Any]:

        """continue the _execute_context() method for a single DBAPI

        cursor.execute() or cursor.executemany() call.

    

        """

        if dialect.bind_typing is BindTyping.SETINPUTSIZES:

            generic_setinputsizes = context._prepare_set_input_sizes()

    

            if generic_setinputsizes:

                try:

                    dialect.do_set_input_sizes(

                        context.cursor, generic_setinputsizes, context

                    )

                except BaseException as e:

                    self._handle_dbapi_exception(

                        e, str(statement), parameters, None, context

                    )

    

        cursor, str_statement, parameters = (

            context.cursor,

            context.statement,

            context.parameters,

        )

    

        effective_parameters: Optional[_AnyExecuteParams]

    

        if not context.executemany:

            effective_parameters = parameters[0]

        else:

            effective_parameters = parameters

    

        if self._has_events or self.engine._has_events:

            for fn in self.dispatch.before_cursor_execute:

                str_statement, effective_parameters = fn(

                    self,

                    cursor,

                    str_statement,

                    effective_parameters,

                    context,

                    context.executemany,

                )

    

        if self._echo:

            self._log_info(str_statement)

    

            stats = context._get_cache_stats()

    

            if not self.engine.hide_parameters:

                self._log_info(

                    "[%s] %r",

                    stats,

                    sql_util._repr_params(

                        effective_parameters,

                        batches=10,

                        ismulti=context.executemany,

                    ),

                )

            else:

                self._log_info(

                    "[%s] [SQL parameters hidden due to hide_parameters=True]",

                    stats,

                )

    

        evt_handled: bool = False

        try:

            if context.execute_style is ExecuteStyle.EXECUTEMANY:

                effective_parameters = cast(

                    "_CoreMultiExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_executemany:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_executemany(

                        cursor,

                        str_statement,

                        effective_parameters,

                        context,

                    )

            elif not effective_parameters and context.no_parameters:

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute_no_params:

                        if fn(cursor, str_statement, context):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_execute_no_params(

                        cursor, str_statement, context

                    )

            else:

                effective_parameters = cast(

                    "_CoreSingleExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

>                   self.dialect.do_execute(

                        cursor, str_statement, effective_parameters, context

                    )



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b"\xff&\x04#23000Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'"



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       pymysql.err.IntegrityError: (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



The above exception was the direct cause of the following exception:



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

        dest_path = dest_dir / candidate

    

        # write bytes

        try:

            with dest_path.open("wb") as f:

                f.write(wm_bytes)

        except Exception as e:

            app.logger.error(

                "Failed to write watermarked file %s for document %s: %s",

                dest_path,

                doc_id,

                e,

            )

            return jsonify({"error": "failed to write watermarked file"}), 500

    

        # link token = sha256(watermarked_file_name) - using stronger hash

        link_token = hashlib.sha256(candidate.encode("utf-8")).hexdigest()

    

        try:

            with get_engine().begin() as conn:

>               conn.execute(

                    text(

                        """

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (:documentid, :link, :intended_for, :secret,

                               :method, :position, :path)

                    """

                    ),

                    {

                        "documentid": doc_id,

                        "link": link_token,

                        "intended_for": intended_for,

                        "secret": secret,

                        "method": method,

                        "position": position or "",

                        "path": str(dest_path),

                    },

                )



server.py:1069: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1419: in execute

    return meth(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\sql\elements.py:526: in _execute_on_connection

    return connection._execute_clauseelement(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1641: in _execute_clauseelement

    ret = self._execute_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1846: in _execute_context

    return self._exec_single_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1986: in _exec_single_context

    self._handle_dbapi_exception(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2355: in _handle_dbapi_exception

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: in _exec_single_context

    self.dialect.do_execute(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b"\xff&\x04#23000Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'"



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       sqlalchemy.exc.IntegrityError: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

E       [SQL: 

E                               INSERT INTO Versions (documentid, link, intended_for,

E                                                   secret, method, position, path)

E                               VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

E                                      %(method)s, %(position)s, %(path)s)

E                           ]

E       [parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

E       (Background on this error at: https://sqlalche.me/e/20/gkpj)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:341: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



document_id = 1



    @app.post("/api/create-watermark")

    @app.post("/api/create-watermark/<int:document_id>")

    @require_auth

    def create_watermark(document_id: int | None = None):

        # accept id from path, query (?id= / ?documentid=), or JSON body on GET

        if not document_id:

            document_id = (

                request.args.get("id")

                or request.args.get("documentid")

                or (request.is_json and (request.get_json(silent=True) or {}).get("id"))

            )

        try:

            doc_id = document_id

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id in query: %s", document_id)

            return jsonify({"error": "document id required"}), 400

    

        payload = request.get_json(silent=True) or {}

        # allow a couple of aliases for convenience

        method = payload.get("method")

        intended_for = payload.get("intended_for")

        position = payload.get("position") or None

        secret = payload.get("secret")

        key = payload.get("key")

    

        # validate input

        try:

            if doc_id is None:

                app.logger.warning("Missing document id in request")

                return jsonify({"error": "document_id (int) is required"}), 400

            doc_id = int(doc_id)

            if doc_id <= 0 or doc_id > MAX_DB_INT:

                return jsonify({"error": "document_id (int) is required"}), 400

        except (TypeError, ValueError):

            app.logger.warning("Invalid document id: %s", document_id)

            return jsonify({"error": "document_id (int) is required"}), 400

        if (

            not method

            or not intended_for

            or not isinstance(secret, str)

            or not isinstance(key, str)

        ):

            app.logger.warning("Missing required fields for watermarking: %s", payload)

            return jsonify(

                {"error": "method, intended_for, secret, and key are required"}

            ), 400

    

        # lookup the document; enforce ownership

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        """

                        SELECT id, name, path

                        FROM Documents

                        WHERE id = :id AND ownerid = :owner

                        LIMIT 1

                    """

                    ),

                    {"id": doc_id, "owner": int(g.user["id"])},

                ).first()

        except Exception as e:

            app.logger.error("Database error fetching document %s", e)

            return jsonify({"error": "database error"}), 503

    

        if not row:

            app.logger.warning(

                "Document not found or access denied for watermarking id=%s", doc_id

            )

            return jsonify({"error": "document not found"}), 404

    

        # resolve path safely under STORAGE_DIR

        storage_root = Path(app.config["STORAGE_DIR"]).resolve()

        file_path = Path(row.path)

        if not file_path.is_absolute():

            file_path = storage_root / file_path

        file_path = file_path.resolve()

        try:

            file_path.relative_to(storage_root)

        except ValueError:

            app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)

            return jsonify({"error": "document path invalid"}), 500

        if not file_path.exists():

            app.logger.error("File missing on disk for document id=%s", doc_id)

            return jsonify({"error": "file missing on disk"}), 410

    

        # check watermark applicability

        try:

            applicable = WMUtils.is_watermarking_applicable(

                method=method, pdf=str(file_path), position=position

            )

            if applicable is False:

                inc_watermark_failed(method, "applicability")

                app.logger.info(

                    "Watermarking method %s not applicable for document %s",

                    method,

                    doc_id,

                )

                return jsonify({"error": "watermarking method not applicable"}), 400

        except Exception as e:

            inc_watermark_failed(method, "applicability_exception")

            app.logger.error(

                "Watermark applicability check failed for document %s: %s", doc_id, e

            )

            return jsonify({"error": "watermark applicability check failed"}), 400

    

        # apply watermark ÔåÆ bytes

        try:

            _wm_start = time.time()

            wm_bytes: bytes = WMUtils.apply_watermark(

                pdf=str(file_path),

                secret=secret,

                key=key,

                method=method,

                intended_for=intended_for,

                position=position,

            )

            observe_watermark_duration(method, time.time() - _wm_start)

            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:

                inc_watermark_failed(method, "empty_output")

                app.logger.error(

                    "Watermarking produced no output for document %s using method %s",

                    doc_id,

                    method,

                )

                return jsonify({"error": "watermarking produced no output"}), 500

        except Exception as e:

            inc_watermark_failed(method, "exception")

            app.logger.error(

                "Watermarking failed for document %s using method %s: %s",

                doc_id,

                method,

                e,

            )

            return jsonify({"error": "watermarking failed"}), 500

    

        # build destination file name: "<original_name>__<intended_to>.pdf"

        base_name = Path(row.name or file_path.name).stem

        intended_slug = secure_filename(intended_for)

        dest_dir = file_path.parent / "watermarks"

        dest_dir.mkdir(parents=True, exist_ok=True)

    

        candidate = f"{base_name}__{intended_slug}.pdf"

        dest_path = dest_dir / candidate

    

        # write bytes

        try:

            with dest_path.open("wb") as f:

                f.write(wm_bytes)

        except Exception as e:

            app.logger.error(

                "Failed to write watermarked file %s for document %s: %s",

                dest_path,

                doc_id,

                e,

            )

            return jsonify({"error": "failed to write watermarked file"}), 500

    

        # link token = sha256(watermarked_file_name) - using stronger hash

        link_token = hashlib.sha256(candidate.encode("utf-8")).hexdigest()

    

        try:

            with get_engine().begin() as conn:

                conn.execute(

                    text(

                        """

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (:documentid, :link, :intended_for, :secret,

                               :method, :position, :path)

                    """

                    ),

                    {

                        "documentid": doc_id,

                        "link": link_token,

                        "intended_for": intended_for,

                        "secret": secret,

                        "method": method,

                        "position": position or "",

                        "path": str(dest_path),

                    },

                )

                vid = int(conn.execute(text("SELECT LAST_INSERT_ID()")).scalar())

>       except CosmicRayTestingException as ie:

               ^^^^^^^^^^^^^^^^^^^^^^^^^

E       NameError: name 'CosmicRayTestingException' is not defined



server.py:1089: NameError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - NameError: name 'Co...

1 failed, 13 passed, 22 warnings in 21.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 48

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1090,7 +1090,7 @@
             # This should be very rare due to SHA-256 usage, but handle it just in case
             try:
                 dest_path.unlink(missing_ok=True)
-            except Exception as cleanup_error:
+            except CosmicRayTestingException as cleanup_error:
                 app.logger.warning(
                     f"Failed to cleanup file {dest_path}: {cleanup_error}"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 49

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1099,7 +1099,7 @@
             )
             inc_db_error("insert_version")
             return jsonify({"error": "database error during version insert"}), 503
-        except Exception:
+        except CosmicRayTestingException:
             try:
                 dest_path.unlink(missing_ok=True)
             except Exception as cleanup_error:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 50

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1102,7 +1102,7 @@
         except Exception:
             try:
                 dest_path.unlink(missing_ok=True)
-            except Exception as cleanup_error:
+            except CosmicRayTestingException as cleanup_error:
                 app.logger.warning(
                     f"Failed to cleanup file {dest_path}: {cleanup_error}"
                 )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e3539ebb89404f67f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 22.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 51

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1153,7 +1153,7 @@
             )
         try:
             doc_id = document_id
-        except (TypeError, ValueError):
+        except (CosmicRayTestingException, ValueError):
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004023041351Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004023950110Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 52

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1153,7 +1153,7 @@
             )
         try:
             doc_id = document_id
-        except (TypeError, ValueError):
+        except (TypeError, CosmicRayTestingException):
             app.logger.warning("Invalid document id in query: %s", document_id)
             return jsonify({"error": "document id required"}), 400

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e02b77c873b6f7c77: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 53

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1171,7 +1171,7 @@
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
-        except (TypeError, ValueError):
+        except (CosmicRayTestingException, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
         if not method or not isinstance(method, str) or not isinstance(key, str):

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013407801359Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013408742024Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 54

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1171,7 +1171,7 @@
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
-        except (TypeError, ValueError):
+        except (TypeError, CosmicRayTestingException):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400
         if not method or not isinstance(method, str) or not isinstance(key, str):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 55

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1192,7 +1192,7 @@
                     ),
                     {"id": doc_id, "owner": int(g.user["id"])},
                 ).first()
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error(
                 "Database error fetching document %s for watermark read: %s", doc_id, e
             )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e826caa7c00bbc11e: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 56

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1212,7 +1212,7 @@
         file_path = file_path.resolve()
         try:
             file_path.relative_to(storage_root)
-        except ValueError:
+        except CosmicRayTestingException:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
             return jsonify({"error": "document path invalid"}), 500
         if not file_path.exists():

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 57

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1222,7 +1222,7 @@
         secret = None
         try:
             secret = WMUtils.read_watermark(method=method, pdf=str(file_path), key=key)
-        except Exception as e:
+        except CosmicRayTestingException as e:
             app.logger.error(
                 "Error when attempting to read watermark for document %s: %s", doc_id, e
             )

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015110997150Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015111914604Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = ( 3**63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = ( 1**63) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.....F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:824 Non-positive document id for deletion: 2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 400 == 200

5 failed, 9 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2** 64) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000749690405Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000750583155Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2** 62) - 1
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) - 2
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -31,7 +31,7 @@
     render_prometheus,
 )
 
-MAX_DB_INT = (2**63) - 1
+MAX_DB_INT = (2**63) - 0
 
 RMAPHandler = None  # default
 if not os.environ.get("TATOU_TEST_DISABLE_RMAP"):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055509820720Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055510764647Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -91,7 +91,7 @@
     def _serializer():
         return URLSafeTimedSerializer(app.config["SECRET_KEY"], salt="ljkdsad123123kjd")
 
-    def _auth_error(msg: str, code: int = 401):
+    def _auth_error(msg: str, code: int = 402):
         app.logger.warning("Auth error (%s): %s", code, msg)
         return jsonify({"error": msg}), code

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec7e9bd07c622611b: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -91,7 +91,7 @@
     def _serializer():
         return URLSafeTimedSerializer(app.config["SECRET_KEY"], salt="ljkdsad123123kjd")
 
-    def _auth_error(msg: str, code: int = 401):
+    def _auth_error(msg: str, code: int = 400):
         app.logger.warning("Auth error (%s): %s", code, msg)
         return jsonify({"error": msg}), code

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -99,7 +99,7 @@
         @wraps(f)
         def wrapper(*args, **kwargs):
             if app.config['TESTING']:
-                g.user = {"id": 1, "login": "username", "email": "user@email.se"}
+                g.user = {"id": 2, "login": "username", "email": "user@email.se"}
                 return f(*args, **kwargs)
             auth = request.headers.get("Authorization", "")
             if not auth.startswith("Bearer "):

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195606495005Z__input.pdf user=2

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195607669469Z__watermarked.pdf user=2

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 20.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -99,7 +99,7 @@
         @wraps(f)
         def wrapper(*args, **kwargs):
             if app.config['TESTING']:
-                g.user = {"id": 1, "login": "username", "email": "user@email.se"}
+                g.user = {"id": 0, "login": "username", "email": "user@email.se"}
                 return f(*args, **kwargs)
             auth = request.headers.get("Authorization", "")
             if not auth.startswith("Bearer "):

...F.FFF.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212348049909Z__input.pdf user=0

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 35 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:530 Missing user info in auth token

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212349231492Z__watermarked.pdf user=0

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 401 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

7 failed, 7 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -104,7 +104,7 @@
             auth = request.headers.get("Authorization", "")
             if not auth.startswith("Bearer "):
                 return _auth_error("Missing or invalid Authorization header")
-            token = auth.split(" ", 1)[1].strip()
+            token = auth.split(" ", 2)[1].strip()
             try:
                 data = _serializer().loads(
                     token, max_age=app.config["TOKEN_TTL_SECONDS"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -104,7 +104,7 @@
             auth = request.headers.get("Authorization", "")
             if not auth.startswith("Bearer "):
                 return _auth_error("Missing or invalid Authorization header")
-            token = auth.split(" ", 1)[1].strip()
+            token = auth.split(" ", 0)[1].strip()
             try:
                 data = _serializer().loads(
                     token, max_age=app.config["TOKEN_TTL_SECONDS"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -104,7 +104,7 @@
             auth = request.headers.get("Authorization", "")
             if not auth.startswith("Bearer "):
                 return _auth_error("Missing or invalid Authorization header")
-            token = auth.split(" ", 1)[1].strip()
+            token = auth.split(" ", 1)[ 2].strip()
             try:
                 data = _serializer().loads(
                     token, max_age=app.config["TOKEN_TTL_SECONDS"]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T230819227889Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T230820126490Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 13

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -104,7 +104,7 @@
             auth = request.headers.get("Authorization", "")
             if not auth.startswith("Bearer "):
                 return _auth_error("Missing or invalid Authorization header")
-            token = auth.split(" ", 1)[1].strip()
+            token = auth.split(" ", 1)[ 0].strip()
             try:
                 data = _serializer().loads(
                     token, max_age=app.config["TOKEN_TTL_SECONDS"]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213700146614Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213701015355Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 14

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read( 1025 * 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 15

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read( 1023 * 1024), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 16

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 * 1025), b""):
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 17

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in iter(lambda: f.read(1024 * 1023), b""):
                 h.update(chunk)
         return h.hexdigest()

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171501887559Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171502835134Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 18

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -180,7 +180,7 @@
             db_ok = False
         return jsonify(
             {"message": "The server is up and running.", "db_connected": db_ok}
-        ), 200
+        ), 201
 
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:

FFFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_healthz_route ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_healthz_route(client):

        """Test the health check endpoint."""

        resp = client.get("/healthz")

    

>       assert resp.status_code == 200  # nosec B101

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:56: AssertionError

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172132491002Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172133349927Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_healthz_route - assert 201 == 200

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

11 failed, 3 passed, 22 warnings in 19.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 19

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -180,7 +180,7 @@
             db_ok = False
         return jsonify(
             {"message": "The server is up and running.", "db_connected": db_ok}
-        ), 200
+        ), 199
 
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:

F.............                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_healthz_route ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_healthz_route(client):

        """Test the health check endpoint."""

        resp = client.get("/healthz")

    

>       assert resp.status_code == 200  # nosec B101

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 199 == 200

E        +  where 199 = <WrapperTestResponse streamed [199 UNKNOWN]>.status_code



..\test\test_api.py:56: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_healthz_route - assert 199 == 200

1 failed, 13 passed, 22 warnings in 20.77s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 20

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 321 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 21

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 319 or len(login) > 64:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054420761243Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054421689486Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 22

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 or len(login) > 65:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 23

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -185,7 +185,7 @@
     # Extra backend validation for user input
     def validate_user_input(email: str, login: str) -> tuple[bool, str]:
         """Validate user input before database operations"""
-        if len(email) > 320 or len(login) > 64:
+        if len(email) > 320 or len(login) > 63:
             return False, "Email or login too long"
         if not re.match(r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$", email):
             return False, "Invalid email format"

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 24

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -203,7 +203,7 @@
         start_db = time.time()
         if not email or not login or not password:
             app.logger.warning("Missing fields in user creation: %s", payload)
-            return jsonify({"error": "email, login, and password are required"}), 400
+            return jsonify({"error": "email, login, and password are required"}), 401
 
         hpw = generate_password_hash(password)

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

        assert resp.status_code == 201  # Endpoint should exist

        assert resp.is_json

        #check types

        assert isinstance(resp_data.get("id"), int)

        assert isinstance(resp_data.get("login"), str)

        assert isinstance(resp_data.get("email"), str)

        #check values are what we submitted

        assert resp_data.get("login") == parameters["login"]

        assert resp_data.get("email") == parameters["email"]

    

        #Test with missing parameters

        # Missing email

        resp = client.post("/api/create-user",json={

                    "login": "username",

                    "password": "password",

                },  # pragma: allowlist secret

        )

>       assert resp.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:90: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'login': 'username', 'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 401 == 400

1 failed, 13 passed, 22 warnings in 21.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 25

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -203,7 +203,7 @@
         start_db = time.time()
         if not email or not login or not password:
             app.logger.warning("Missing fields in user creation: %s", payload)
-            return jsonify({"error": "email, login, and password are required"}), 400
+            return jsonify({"error": "email, login, and password are required"}), 399
 
         hpw = generate_password_hash(password)

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

        assert resp.status_code == 201  # Endpoint should exist

        assert resp.is_json

        #check types

        assert isinstance(resp_data.get("id"), int)

        assert isinstance(resp_data.get("login"), str)

        assert isinstance(resp_data.get("email"), str)

        #check values are what we submitted

        assert resp_data.get("login") == parameters["login"]

        assert resp_data.get("email") == parameters["email"]

    

        #Test with missing parameters

        # Missing email

        resp = client.post("/api/create-user",json={

                    "login": "username",

                    "password": "password",

                },  # pragma: allowlist secret

        )

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:90: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:205 Missing fields in user creation: {'login': 'username', 'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 21.26s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 26

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -211,7 +211,7 @@
             is_valid, error_msg = validate_user_input(email, login)
             if not is_valid:
                 app.logger.warning("User input validation failed: %s", error_msg)
-                return jsonify({"error": error_msg}), 400
+                return jsonify({"error": error_msg}), 401
 
             with get_engine().begin() as conn:
                 res = conn.execute(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 27

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -211,7 +211,7 @@
             is_valid, error_msg = validate_user_input(email, login)
             if not is_valid:
                 app.logger.warning("User input validation failed: %s", error_msg)
-                return jsonify({"error": error_msg}), 400
+                return jsonify({"error": error_msg}), 399
 
             with get_engine().begin() as conn:
                 res = conn.execute(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 28

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -231,7 +231,7 @@
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login
             )
-            return jsonify({"error": "email or login already exists"}), 409
+            return jsonify({"error": "email or login already exists"}), 410
         except Exception as e:
             app.logger.error("Database error in create_user: %s", e)
             return jsonify({"error": "database error"}), 503

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205040241902Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205041357658Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 29

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -231,7 +231,7 @@
             app.logger.warning(
                 "Attempt to create duplicate user: email=%s, login=%s", email, login
             )
-            return jsonify({"error": "email or login already exists"}), 409
+            return jsonify({"error": "email or login already exists"}), 408
         except Exception as e:
             app.logger.error("Database error in create_user: %s", e)
             return jsonify({"error": "database error"}), 503

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 30

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -234,7 +234,7 @@
             return jsonify({"error": "email or login already exists"}), 409
         except Exception as e:
             app.logger.error("Database error in create_user: %s", e)
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 504
 
         return jsonify({"id": row.id, "email": row.email, "login": row.login}), 201

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e877cd61f49c030bf: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.71s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 31

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -234,7 +234,7 @@
             return jsonify({"error": "email or login already exists"}), 409
         except Exception as e:
             app.logger.error("Database error in create_user: %s", e)
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 502
 
         return jsonify({"id": row.id, "email": row.email, "login": row.login}), 201

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 32

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -236,7 +236,7 @@
             app.logger.error("Database error in create_user: %s", e)
             return jsonify({"error": "database error"}), 503
 
-        return jsonify({"id": row.id, "email": row.email, "login": row.login}), 201
+        return jsonify({"id": row.id, "email": row.email, "login": row.login}), 202
 
     # POST /api/login {login, password}
     @app.post("/api/login")

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 202 == 201

E        +  where 202 = <WrapperTestResponse 52 bytes [202 ACCEPTED]>.status_code



..\test\test_api.py:73: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 202 == 201

1 failed, 13 passed, 22 warnings in 20.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 33

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -236,7 +236,7 @@
             app.logger.error("Database error in create_user: %s", e)
             return jsonify({"error": "database error"}), 503
 
-        return jsonify({"id": row.id, "email": row.email, "login": row.login}), 201
+        return jsonify({"id": row.id, "email": row.email, "login": row.login}), 200
 
     # POST /api/login {login, password}
     @app.post("/api/login")

.F............                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 200 == 201

E        +  where 200 = <WrapperTestResponse 52 bytes [200 OK]>.status_code



..\test\test_api.py:73: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 200 == 201

1 failed, 13 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 34

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -247,7 +247,7 @@
 
         if not email or not password:
             app.logger.warning("Missing fields in login attempt: %s", payload)
-            return jsonify({"error": "email and password are required"}), 400
+            return jsonify({"error": "email and password are required"}), 401
 
         start_db = time.time()
         try:

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

        assert resp.status_code == 200

        assert resp.is_json

        #check types

        assert isinstance(resp_data.get("token"), str)

        assert isinstance(resp_data.get("token_type"), str)

        assert isinstance(resp_data.get("expires_in"), int)

        #check val

        assert resp_data.get("token_type") == "bearer"

    

        #Test with missing parameters

        # Missing email

        resp = client.post("/api/login", json={"password": "password"})

>       assert resp.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:129: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 401 == 400

1 failed, 13 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 35

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -247,7 +247,7 @@
 
         if not email or not password:
             app.logger.warning("Missing fields in login attempt: %s", payload)
-            return jsonify({"error": "email and password are required"}), 400
+            return jsonify({"error": "email and password are required"}), 399
 
         start_db = time.time()
         try:

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

        assert resp.status_code == 200

        assert resp.is_json

        #check types

        assert isinstance(resp_data.get("token"), str)

        assert isinstance(resp_data.get("token_type"), str)

        assert isinstance(resp_data.get("expires_in"), int)

        #check val

        assert resp_data.get("token_type") == "bearer"

    

        #Test with missing parameters

        # Missing email

        resp = client.post("/api/login", json={"password": "password"})

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:129: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:249 Missing fields in login attempt: {'password': 'password'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 36

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -274,7 +274,7 @@
                         email if email else "<empty>",
                     )
                     inc_login_failure("invalid_credentials")
-                    return jsonify({"error": "invalid credentials"}), 401
+                    return jsonify({"error": "invalid credentials"}), 402
 
         except Exception as e:
             app.logger.error("Database error in login: %s", e)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 37

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -274,7 +274,7 @@
                         email if email else "<empty>",
                     )
                     inc_login_failure("invalid_credentials")
-                    return jsonify({"error": "invalid credentials"}), 401
+                    return jsonify({"error": "invalid credentials"}), 400
 
         except Exception as e:
             app.logger.error("Database error in login: %s", e)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 38

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -279,7 +279,7 @@
         except Exception as e:
             app.logger.error("Database error in login: %s", e)
             inc_db_error("login_select")
-            return jsonify({"error": "An error occurred"}), 503
+            return jsonify({"error": "An error occurred"}), 504
 
         observe_db_latency("login_select", time.time() - start_db)
         token = _serializer().dumps(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 39

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -279,7 +279,7 @@
         except Exception as e:
             app.logger.error("Database error in login: %s", e)
             inc_db_error("login_select")
-            return jsonify({"error": "An error occurred"}), 503
+            return jsonify({"error": "An error occurred"}), 502
 
         observe_db_latency("login_select", time.time() - start_db)
         token = _serializer().dumps(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 40

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -292,7 +292,7 @@
                 "token_type": "bearer",
                 "expires_in": app.config["TOKEN_TTL_SECONDS"],
             }
-        ), 200
+        ), 201
 
     # POST /api/upload-document  (multipart/form-data)
     @app.post("/api/upload-document")

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse 159 bytes [201 CREATED]>.status_code



..\test\test_api.py:117: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 201 == 200

1 failed, 13 passed, 22 warnings in 20.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 41

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -292,7 +292,7 @@
                 "token_type": "bearer",
                 "expires_in": app.config["TOKEN_TTL_SECONDS"],
             }
-        ), 200
+        ), 199
 
     # POST /api/upload-document  (multipart/form-data)
     @app.post("/api/upload-document")

..FF.....FFF.F                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

>       resp_data = resp.get_json()

                    ^^^^^^^^^^^^^^^



..\test\test_api.py:112: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\response.py:620: in get_json

    return self.json_module.loads(data)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\json\provider.py:187: in loads

    return json.loads(s, **kwargs)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\__init__.py:346: in loads

    return _default_decoder.decode(s)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:337: in decode

    obj, end = self.raw_decode(s, idx=_w(s, 0).end())

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <json.decoder.JSONDecoder object at 0x0000023C1B1148C0>, s = '', idx = 0



    def raw_decode(self, s, idx=0):

        """Decode a JSON document from ``s`` (a ``str`` beginning with

        a JSON document) and return a 2-tuple of the Python

        representation and the index in ``s`` where the document ended.

    

        This can be used to decode a JSON document from a string that may

        have extraneous data at the end.

    

        """

        try:

            obj, end = self.scan_once(s, idx)

        except StopIteration as err:

>           raise JSONDecodeError("Expecting value", s, err.value) from None

E           json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:355: JSONDecodeError

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed0187df42caebe98: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - json.decoder.JSONDecodeError: ...

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 21.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 42

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -301,7 +301,7 @@
         if "file" not in request.files:
             inc_suspicious("upload_missing_file_field")
             app.logger.warning("Upload attempt missing 'file' field")
-            return jsonify({"error": "file is required (multipart/form-data)"}), 400
+            return jsonify({"error": "file is required (multipart/form-data)"}), 401
 
         file = request.files["file"]
         if not file or file.filename == "":

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

>       assert resp.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:165: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 401 == 400

1 failed, 13 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 43

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -301,7 +301,7 @@
         if "file" not in request.files:
             inc_suspicious("upload_missing_file_field")
             app.logger.warning("Upload attempt missing 'file' field")
-            return jsonify({"error": "file is required (multipart/form-data)"}), 400
+            return jsonify({"error": "file is required (multipart/form-data)"}), 399
 
         file = request.files["file"]
         if not file or file.filename == "":

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:165: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 44

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -306,7 +306,7 @@
         file = request.files["file"]
         if not file or file.filename == "":
             app.logger.warning("Upload attempt with empty filename")
-            return jsonify({"error": "empty filename"}), 400
+            return jsonify({"error": "empty filename"}), 401
 
         start_db = time.time()
         # Validate file size

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 45

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -306,7 +306,7 @@
         file = request.files["file"]
         if not file or file.filename == "":
             app.logger.warning("Upload attempt with empty filename")
-            return jsonify({"error": "empty filename"}), 400
+            return jsonify({"error": "empty filename"}), 399
 
         start_db = time.time()
         # Validate file size

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 46

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 51 * 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 201 == 413

E            +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

>           assert upload_resp_data.get("id") == 2

E           AssertionError: assert 3 == 2

E            +  where 3 = <built-in method get of dict object at 0x00000203CEDD0FC0>('id')

E            +    where <built-in method get of dict object at 0x00000203CEDD0FC0> = {'creation': '2025-10-16T22:21:53.957215', 'id': 3, 'name': 'Water File', 'sha256': '5FBAC867F5EFDD7B0AB5C11456B204DDD08FF8801502C93728BE3B38BFAFE80C', ...}.get



..\test\test_api.py:390: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 201 == 413

FAILED ..\test\test_api.py::test_read_watermark_route - AssertionError: asser...

2 failed, 12 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 47

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 49 * 1024 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 48

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1025 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012216549159Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012217484452Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 49

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1023 * 1024  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002851898070Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002852804537Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 50

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 * 1025  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee6edbc3f5f8f5f99: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.76s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 51

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -310,7 +310,7 @@
 
         start_db = time.time()
         # Validate file size
-        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB
+        MAX_FILE_SIZE = 50 * 1024 * 1023  # 50MB
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 52

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -314,7 +314,7 @@
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
-            return jsonify({"error": "file too large"}), 413
+            return jsonify({"error": "file too large"}), 414
 
         # Validate file type and MIME type
         if file.mimetype != "application/pdf":

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 414 == 413

E            +  where 414 = <WrapperTestResponse streamed [414 REQUEST URI TOO LONG]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

WARNING  server:server.py:316 Upload attempt with oversized file: bigfile.pdf

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 414 == 413

1 failed, 13 passed, 22 warnings in 20.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 53

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -314,7 +314,7 @@
         if file.content_length and file.content_length > MAX_FILE_SIZE:
             inc_suspicious("upload_oversize")
             app.logger.warning("Upload attempt with oversized file: %s", file.filename)
-            return jsonify({"error": "file too large"}), 413
+            return jsonify({"error": "file too large"}), 412
 
         # Validate file type and MIME type
         if file.mimetype != "application/pdf":

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

>           assert resp.status_code == 413

E           assert 412 == 413

E            +  where 412 = <WrapperTestResponse streamed [412 PRECONDITION FAILED]>.status_code



..\test\test_api.py:181: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

WARNING  server:server.py:316 Upload attempt with oversized file: bigfile.pdf

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 412 == 413

1 failed, 13 passed, 22 warnings in 21.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 54

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -322,7 +322,7 @@
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype
             )
-            return jsonify({"error": "only PDF files are allowed"}), 415
+            return jsonify({"error": "only PDF files are allowed"}), 416
         if not file.filename.lower().endswith(".pdf"):
             inc_suspicious("upload_bad_extension")
             app.logger.warning(

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            assert resp.status_code == 413

    

        #Test with type error, txt file

        resp = client.post("/api/upload-document",

                           data={'file': (BytesIO(b"example"), "test.txt", "text/plain"),

                            'name': 'file'},

                            content_type='multipart/form-data')

>       assert resp.status_code == 415

E       assert 416 == 415

E        +  where 416 = <WrapperTestResponse streamed [416 REQUESTED RANGE NOT SATISFIABLE]>.status_code



..\test\test_api.py:188: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

WARNING  server:server.py:316 Upload attempt with oversized file: bigfile.pdf

WARNING  server:server.py:322 Upload attempt with invalid MIME type: text/plain

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 416 == 415

1 failed, 13 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 55

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -322,7 +322,7 @@
             app.logger.warning(
                 "Upload attempt with invalid MIME type: %s", file.mimetype
             )
-            return jsonify({"error": "only PDF files are allowed"}), 415
+            return jsonify({"error": "only PDF files are allowed"}), 414
         if not file.filename.lower().endswith(".pdf"):
             inc_suspicious("upload_bad_extension")
             app.logger.warning(

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

            resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            assert resp.status_code == 413

    

        #Test with type error, txt file

        resp = client.post("/api/upload-document",

                           data={'file': (BytesIO(b"example"), "test.txt", "text/plain"),

                            'name': 'file'},

                            content_type='multipart/form-data')

>       assert resp.status_code == 415

E       assert 414 == 415

E        +  where 414 = <WrapperTestResponse streamed [414 REQUEST URI TOO LONG]>.status_code



..\test\test_api.py:188: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

WARNING  server:server.py:316 Upload attempt with oversized file: bigfile.pdf

WARNING  server:server.py:322 Upload attempt with invalid MIME type: text/plain

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 414 == 415

1 failed, 13 passed, 22 warnings in 20.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 56

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -328,7 +328,7 @@
             app.logger.warning(
                 "Upload attempt with invalid file extension: %s", file.filename
             )
-            return jsonify({"error": "only PDF files are allowed"}), 415
+            return jsonify({"error": "only PDF files are allowed"}), 416
 
         # Sanitize filename
         fname = secure_filename(file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 57

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -328,7 +328,7 @@
             app.logger.warning(
                 "Upload attempt with invalid file extension: %s", file.filename
             )
-            return jsonify({"error": "only PDF files are allowed"}), 415
+            return jsonify({"error": "only PDF files are allowed"}), 414
 
         # Sanitize filename
         fname = secure_filename(file.filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.85s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 58

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -336,7 +336,7 @@
             app.logger.warning(
                 "Upload attempt with invalid filename: %s", file.filename
             )
-            return jsonify({"error": "invalid filename"}), 400
+            return jsonify({"error": "invalid filename"}), 401
 
         user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211920110409Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211921047035Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 59

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -336,7 +336,7 @@
             app.logger.warning(
                 "Upload attempt with invalid filename: %s", file.filename
             )
-            return jsonify({"error": "invalid filename"}), 400
+            return jsonify({"error": "invalid filename"}), 399
 
         user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]
         user_dir.mkdir(parents=True, exist_ok=True)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153223671244Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153224599563Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 60

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -350,7 +350,7 @@
             stored_path = (user_dir / stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
-                return jsonify({"error": "invalid path"}), 400
+                return jsonify({"error": "invalid path"}), 401
 
             file.save(stored_path)
         except Exception as e:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 61

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -350,7 +350,7 @@
             stored_path = (user_dir / stored_name).resolve()
             if not str(stored_path).startswith(str(user_dir.resolve())):
                 app.logger.warning("Upload attempt with invalid path: %s", stored_path)
-                return jsonify({"error": "invalid path"}), 400
+                return jsonify({"error": "invalid path"}), 399
 
             file.save(stored_path)
         except Exception as e:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0f8995d44a152f07: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 62

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -355,7 +355,7 @@
             file.save(stored_path)
         except Exception as e:
             app.logger.error("File save error: %s", e)
-            return jsonify({"error": "failed to save file"}), 500
+            return jsonify({"error": "failed to save file"}), 501
 
         sha_hex = _sha256_file(stored_path)
         size = stored_path.stat().st_size

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 63

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -355,7 +355,7 @@
             file.save(stored_path)
         except Exception as e:
             app.logger.error("File save error: %s", e)
-            return jsonify({"error": "failed to save file"}), 500
+            return jsonify({"error": "failed to save file"}), 499
 
         sha_hex = _sha256_file(stored_path)
         size = stored_path.stat().st_size

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151346271973Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151347120197Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 64

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -396,7 +396,7 @@
                 int(g.user["id"]),
             )
             inc_db_error("insert_document")
-            return jsonify({"error": "database error occurred"}), 503
+            return jsonify({"error": "database error occurred"}), 504
 
         observe_db_latency("insert_document", time.time() - start_db)
         resp_data = {

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 504 == 201

E            +  where 504 = <WrapperTestResponse 36 bytes [504 GATEWAY TIMEOUT]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010807341417Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 504 == 201

E            +  where 504 = <WrapperTestResponse 36 bytes [504 GATEWAY TIMEOUT]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010808181613Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 504 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 504 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 65

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -396,7 +396,7 @@
                 int(g.user["id"]),
             )
             inc_db_error("insert_document")
-            return jsonify({"error": "database error occurred"}), 503
+            return jsonify({"error": "database error occurred"}), 502
 
         observe_db_latency("insert_document", time.time() - start_db)
         resp_data = {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 66

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -409,7 +409,7 @@
             "size": int(row.size),
         }
         inc_upload(int(row.size))
-        return jsonify(resp_data), 201
+        return jsonify(resp_data), 202
 
     # GET /api/list-documents
     @app.get("/api/list-documents")

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 202 == 201

E            +  where 202 = <WrapperTestResponse 155 bytes [202 ACCEPTED]>.status_code



..\test\test_api.py:152: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 202 == 201

E            +  where 202 = <WrapperTestResponse 158 bytes [202 ACCEPTED]>.status_code



..\test\test_api.py:389: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 202 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 202 == 201

2 failed, 12 passed, 22 warnings in 20.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 67

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -409,7 +409,7 @@
             "size": int(row.size),
         }
         inc_upload(int(row.size))
-        return jsonify(resp_data), 201
+        return jsonify(resp_data), 200
 
     # GET /api/list-documents
     @app.get("/api/list-documents")

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 200 == 201

E            +  where 200 = <WrapperTestResponse 155 bytes [200 OK]>.status_code



..\test\test_api.py:152: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 200 == 201

E            +  where 200 = <WrapperTestResponse 158 bytes [200 OK]>.status_code



..\test\test_api.py:389: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - assert 200 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 200 == 201

2 failed, 12 passed, 22 warnings in 19.53s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 68

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -433,7 +433,7 @@
                 "Database error in list_documents for user=%s", g.user["id"]
             )
             inc_db_error("list_documents")
-            return jsonify({"error": "An error occurred while fetching documents"}), 503
+            return jsonify({"error": "An error occurred while fetching documents"}), 504
 
         docs = [
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 69

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -433,7 +433,7 @@
                 "Database error in list_documents for user=%s", g.user["id"]
             )
             inc_db_error("list_documents")
-            return jsonify({"error": "An error occurred while fetching documents"}), 503
+            return jsonify({"error": "An error occurred while fetching documents"}), 502
 
         docs = [
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 70

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -447,7 +447,7 @@
             }
             for r in rows
         ]
-        return jsonify({"documents": docs}), 200
+        return jsonify({"documents": docs}), 201
 
     # GET /api/list-versions
     @app.get("/api/list-versions")

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034525972219Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse 17 bytes [201 CREATED]>.status_code



..\test\test_api.py:198: AssertionError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034526875484Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 201 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 71

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -447,7 +447,7 @@
             }
             for r in rows
         ]
-        return jsonify({"documents": docs}), 200
+        return jsonify({"documents": docs}), 199
 
     # GET /api/list-versions
     @app.get("/api/list-versions")

....F.........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

>       resp_data = resp.get_json()

                    ^^^^^^^^^^^^^^^



..\test\test_api.py:195: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\response.py:620: in get_json

    return self.json_module.loads(data)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\json\provider.py:187: in loads

    return json.loads(s, **kwargs)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\__init__.py:346: in loads

    return _default_decoder.decode(s)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:337: in decode

    obj, end = self.raw_decode(s, idx=_w(s, 0).end())

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <json.decoder.JSONDecoder object at 0x000002348424C5F0>, s = '', idx = 0



    def raw_decode(self, s, idx=0):

        """Decode a JSON document from ``s`` (a ``str`` beginning with

        a JSON document) and return a 2-tuple of the Python

        representation and the index in ``s`` where the document ended.

    

        This can be used to decode a JSON document from a string that may

        have extraneous data at the end.

    

        """

        try:

            obj, end = self.scan_once(s, idx)

        except StopIteration as err:

>           raise JSONDecodeError("Expecting value", s, err.value) from None

E           json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:355: JSONDecodeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_documents_route - json.decoder.JSONDeco...

1 failed, 13 passed, 22 warnings in 21.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 72

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= 1 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 73

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -459,7 +459,7 @@
             document_id = request.args.get("id") or request.args.get("documentid")
             try:
                 document_id = int(document_id) if document_id else None
-                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+                if document_id is None or document_id <= -1 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 74

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -461,7 +461,7 @@
                 document_id = int(document_id) if document_id else None
                 if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
-                    return jsonify({"error": "document id required"}), 400
+                    return jsonify({"error": "document id required"}), 401
             except (TypeError, ValueError):
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400

...F.F...FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 75

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -461,7 +461,7 @@
                 document_id = int(document_id) if document_id else None
                 if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
                     app.logger.warning("Invalid document id in query")
-                    return jsonify({"error": "document id required"}), 400
+                    return jsonify({"error": "document id required"}), 399
             except (TypeError, ValueError):
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 200

        assert resp.is_json

        #check types

        #extract data

        doc_list = resp_data.get("versions")

        assert isinstance(doc_list, list)

        #cycle through each element in the list

        for elem in doc_list:

            assert isinstance(elem.get("id"), str)

            assert isinstance(elem.get("documentid"), str)

            #check the version is from the correct document

            assert elem.get("documentid") == str(parameters["documentid"])

            assert isinstance(elem.get("link"), str)

            assert isinstance(elem.get("intended_for"), str)

            assert isinstance(elem.get("secret"), str)

            assert isinstance(elem.get("method"), str)

    

        #Test with no parameters

        resp = client.get("/api/list-versions")

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:239: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 76

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -464,7 +464,7 @@
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):
                 app.logger.warning("Invalid document id in query")
-                return jsonify({"error": "document id required"}), 400
+                return jsonify({"error": "document id required"}), 401
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000729227978Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000730197742Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 77

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -464,7 +464,7 @@
                     return jsonify({"error": "document id required"}), 400
             except (TypeError, ValueError):
                 app.logger.warning("Invalid document id in query")
-                return jsonify({"error": "document id required"}), 400
+                return jsonify({"error": "document id required"}), 399
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400

...F.....FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

4 failed, 10 passed, 22 warnings in 21.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 78

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 1 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse 33 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 79

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -466,7 +466,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= -1 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 80

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -467,7 +467,7 @@
                 return jsonify({"error": "document id required"}), 400
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 401
 
         try:
             with get_engine().connect() as conn:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 23.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 81

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -467,7 +467,7 @@
                 return jsonify({"error": "document id required"}), 400
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 399
 
         try:
             with get_engine().connect() as conn:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 82

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -486,7 +486,7 @@
                     app.logger.warning(
                         "Document not found or access denied for id=%s", document_id
                     )
-                    return jsonify({"error": "document not found"}), 404
+                    return jsonify({"error": "document not found"}), 405
 
                 # Then fetch versions with ownership validation
                 rows = conn.execute(

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053026164838Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053027100307Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.90s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 83

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -486,7 +486,7 @@
                     app.logger.warning(
                         "Document not found or access denied for id=%s", document_id
                     )
-                    return jsonify({"error": "document not found"}), 404
+                    return jsonify({"error": "document not found"}), 403
 
                 # Then fetch versions with ownership validation
                 rows = conn.execute(

...F.F...FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 200

        assert resp.is_json

        #check types

        #extract data

        doc_list = resp_data.get("versions")

        assert isinstance(doc_list, list)

        #cycle through each element in the list

        for elem in doc_list:

            assert isinstance(elem.get("id"), str)

            assert isinstance(elem.get("documentid"), str)

            #check the version is from the correct document

            assert elem.get("documentid") == str(parameters["documentid"])

            assert isinstance(elem.get("link"), str)

            assert isinstance(elem.get("intended_for"), str)

            assert isinstance(elem.get("secret"), str)

            assert isinstance(elem.get("method"), str)

    

        #Test with no parameters

        resp = client.get("/api/list-versions")

        assert resp.status_code == 400

        #Test with json parameters

        resp = client.get("/api/list-versions", json = parameters)

        assert resp.status_code == 400

        #Test with wrong parameters (missing file)

        resp = client.get("/api/list-versions", query_string = {'documentid': 4})

>       assert resp.status_code == 404

E       assert 403 == 404

E        +  where 403 = <WrapperTestResponse streamed [403 FORBIDDEN]>.status_code



..\test\test_api.py:245: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:463 Invalid document id in query

WARNING  server:server.py:463 Invalid document id in query

WARNING  server:server.py:486 Document not found or access denied for id=4

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ebfc2f16c61f41af3: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_list_versions_route - assert 403 == 404

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 19.71s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 84

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -505,7 +505,7 @@
                 f"Database error in list_versions: {document_id},{g.user['id']}"
             )
             inc_db_error("list_versions")
-            return jsonify({"error": "An error occurred while fetching versions"}), 503
+            return jsonify({"error": "An error occurred while fetching versions"}), 504
 
         versions = [
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 85

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -505,7 +505,7 @@
                 f"Database error in list_versions: {document_id},{g.user['id']}"
             )
             inc_db_error("list_versions")
-            return jsonify({"error": "An error occurred while fetching versions"}), 503
+            return jsonify({"error": "An error occurred while fetching versions"}), 502
 
         versions = [
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 86

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -518,7 +518,7 @@
             }
             for r in rows
         ]
-        return jsonify({"versions": versions}), 200
+        return jsonify({"versions": versions}), 201
 
     # GET /api/list-all-versions
     @app.get("/api/list-all-versions")

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse 16 bytes [201 CREATED]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 201 == 200

1 failed, 13 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 87

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -518,7 +518,7 @@
             }
             for r in rows
         ]
-        return jsonify({"versions": versions}), 200
+        return jsonify({"versions": versions}), 199
 
     # GET /api/list-all-versions
     @app.get("/api/list-all-versions")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015415827559Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015416801494Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.65s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 88

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -528,7 +528,7 @@
             # Validate user data from auth token
             if not g.user or not g.user.get("id"):
                 app.logger.error("Missing user info in auth token")
-                return jsonify({"error": "Invalid authentication"}), 401
+                return jsonify({"error": "Invalid authentication"}), 402
 
             with get_engine().connect() as conn:
                 rows = conn.execute(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 89

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -528,7 +528,7 @@
             # Validate user data from auth token
             if not g.user or not g.user.get("id"):
                 app.logger.error("Missing user info in auth token")
-                return jsonify({"error": "Invalid authentication"}), 401
+                return jsonify({"error": "Invalid authentication"}), 400
 
             with get_engine().connect() as conn:
                 rows = conn.execute(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 90

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -546,7 +546,7 @@
                 ).all()
         except ValueError:
             app.logger.error("Invalid user ID in auth token")
-            return jsonify({"error": "Authentication error"}), 401
+            return jsonify({"error": "Authentication error"}), 402
         except Exception:
             app.logger.error(
                 "Database error in list_all_versions for user=%s", g.user["id"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 91

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -546,7 +546,7 @@
                 ).all()
         except ValueError:
             app.logger.error("Invalid user ID in auth token")
-            return jsonify({"error": "Authentication error"}), 401
+            return jsonify({"error": "Authentication error"}), 400
         except Exception:
             app.logger.error(
                 "Database error in list_all_versions for user=%s", g.user["id"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 92

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -552,7 +552,7 @@
                 "Database error in list_all_versions for user=%s", g.user["id"]
             )
             inc_db_error("list_all_versions")
-            return jsonify({"error": "An error occurred while fetching versions"}), 503
+            return jsonify({"error": "An error occurred while fetching versions"}), 504
 
         versions = [
             {

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef0706665929bfb4e: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 93

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -552,7 +552,7 @@
                 "Database error in list_all_versions for user=%s", g.user["id"]
             )
             inc_db_error("list_all_versions")
-            return jsonify({"error": "An error occurred while fetching versions"}), 503
+            return jsonify({"error": "An error occurred while fetching versions"}), 502
 
         versions = [
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 94

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -564,7 +564,7 @@
             }
             for r in rows
         ]
-        return jsonify({"versions": versions}), 200
+        return jsonify({"versions": versions}), 201
 
     # GET /api/get-document or /api/get-document/<id>  ÔåÆ returns the PDF (inline)
     @app.get("/api/get-document")

......F.......                                                           [100%]

================================== FAILURES ===================================

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse 16 bytes [201 CREATED]>.status_code



..\test\test_api.py:255: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 201 == 200

1 failed, 13 passed, 22 warnings in 22.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 95

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -564,7 +564,7 @@
             }
             for r in rows
         ]
-        return jsonify({"versions": versions}), 200
+        return jsonify({"versions": versions}), 199
 
     # GET /api/get-document or /api/get-document/<id>  ÔåÆ returns the PDF (inline)
     @app.get("/api/get-document")

......F.......                                                           [100%]

================================== FAILURES ===================================

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

>       resp_data = resp.get_json()

                    ^^^^^^^^^^^^^^^



..\test\test_api.py:252: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\response.py:620: in get_json

    return self.json_module.loads(data)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\json\provider.py:187: in loads

    return json.loads(s, **kwargs)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\__init__.py:346: in loads

    return _default_decoder.decode(s)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:337: in decode

    obj, end = self.raw_decode(s, idx=_w(s, 0).end())

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <json.decoder.JSONDecoder object at 0x000001AE876FC5F0>, s = '', idx = 0



    def raw_decode(self, s, idx=0):

        """Decode a JSON document from ``s`` (a ``str`` beginning with

        a JSON document) and return a 2-tuple of the Python

        representation and the index in ``s`` where the document ended.

    

        This can be used to decode a JSON document from a string that may

        have extraneous data at the end.

    

        """

        try:

            obj, end = self.scan_once(s, idx)

        except StopIteration as err:

>           raise JSONDecodeError("Expecting value", s, err.value) from None

E           json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:355: JSONDecodeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_all_versions_route - json.decoder.JSOND...

1 failed, 13 passed, 22 warnings in 21.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 96

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -578,7 +578,7 @@
                 document_id = int(document_id)
             except (TypeError, ValueError):
                 app.logger.warning("Invalid document id in query")
-                return jsonify({"error": "document id required"}), 400
+                return jsonify({"error": "document id required"}), 401
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

        assert is_pdf

        assert is_inline

    

        #Test with no parameters

        resp = client.get("/api/get-document")

>       assert resp.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:287: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:580 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert 401 == 400

1 failed, 13 passed, 22 warnings in 20.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 97

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -578,7 +578,7 @@
                 document_id = int(document_id)
             except (TypeError, ValueError):
                 app.logger.warning("Invalid document id in query")
-                return jsonify({"error": "document id required"}), 400
+                return jsonify({"error": "document id required"}), 399
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

        assert is_pdf

        assert is_inline

    

        #Test with no parameters

        resp = client.get("/api/get-document")

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:287: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:580 Invalid document id in query

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 98

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= 1 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 99

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -580,7 +580,7 @@
                 app.logger.warning("Invalid document id in query")
                 return jsonify({"error": "document id required"}), 400
 
-        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
+        if document_id is None or document_id <= -1 or document_id > MAX_DB_INT:
             return jsonify({"error": "document id required"}), 400
 
         try:

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 100

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -581,7 +581,7 @@
                 return jsonify({"error": "document id required"}), 400
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 401
 
         try:
             with get_engine().connect() as conn:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 101

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -581,7 +581,7 @@
                 return jsonify({"error": "document id required"}), 400
 
         if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 399
 
         try:
             with get_engine().connect() as conn:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 102

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -603,7 +603,7 @@
             inc_db_error("get_document")
             return jsonify(
                 {"error": "An error occurred while fetching the document"}
-            ), 503
+            ), 504
 
         # DonÔÇÖt leak whether a doc exists for another user
         if not row:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194124620050Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194125602259Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.78s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 103

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -603,7 +603,7 @@
             inc_db_error("get_document")
             return jsonify(
                 {"error": "An error occurred while fetching the document"}
-            ), 503
+            ), 502
 
         # DonÔÇÖt leak whether a doc exists for another user
         if not row:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.93s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 104

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -610,7 +610,7 @@
             app.logger.warning(
                 "Document not found or access denied for id=%s", document_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 405
 
         storage_root = app.config["STORAGE_DIR"].resolve()
         file_path = Path(row.path)

...F...F.FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

        assert is_pdf

        assert is_inline

    

        #Test with no parameters

        resp = client.get("/api/get-document")

        assert resp.status_code == 400

        #Test with json parameters

        resp = client.get("/api/get-document", json = parameters)

        assert resp.status_code == 400

        #Test with wrong parameters (missing file)

        resp = client.get("/api/get-document", query_string = {'documentid': 4})

>       assert resp.status_code == 404

E       assert 405 == 404

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:293: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:580 Invalid document id in query

WARNING  server:server.py:580 Invalid document id in query

WARNING  server:server.py:610 Document not found or access denied for id=4

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e933464880bb593fb: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_get_document_route - assert 405 == 404

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 21.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 105

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -610,7 +610,7 @@
             app.logger.warning(
                 "Document not found or access denied for id=%s", document_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 403
 
         storage_root = app.config["STORAGE_DIR"].resolve()
         file_path = Path(row.path)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161731484767Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161732379744Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 106

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -624,7 +624,7 @@
             app.logger.warning(
                 "Rejected document path for id %s: %s", document_id, row.path
             )
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 501
 
         if not resolved.exists():
             app.logger.error("File missing on disk for document id=%s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 24.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 107

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -624,7 +624,7 @@
             app.logger.warning(
                 "Rejected document path for id %s: %s", document_id, row.path
             )
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 499
 
         if not resolved.exists():
             app.logger.error("File missing on disk for document id=%s", document_id)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb19a67a954d73da5: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.62s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 108

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -628,7 +628,7 @@
 
         if not resolved.exists():
             app.logger.error("File missing on disk for document id=%s", document_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 411
 
         # TOCTOU-safe open and validation
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 109

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -628,7 +628,7 @@
 
         if not resolved.exists():
             app.logger.error("File missing on disk for document id=%s", document_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 409
 
         # TOCTOU-safe open and validation
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 110

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -635,7 +635,7 @@
             f = open(resolved, "rb")
         except OSError:
             app.logger.error("File missing on disk for document id=%s", document_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 411
 
         try:
             # Quick PDF signature check

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 111

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -635,7 +635,7 @@
             f = open(resolved, "rb")
         except OSError:
             app.logger.error("File missing on disk for document id=%s", document_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 409
 
         try:
             # Quick PDF signature check

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e93e4c28298c531bf: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 112

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -639,7 +639,7 @@
 
         try:
             # Quick PDF signature check
-            head = f.read(5)
+            head = f.read( 6)
             if head != b"%PDF-":
                 f.close()
                 app.logger.warning(

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142723582449Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142724521547Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 113

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -639,7 +639,7 @@
 
         try:
             # Quick PDF signature check
-            head = f.read(5)
+            head = f.read( 4)
             if head != b"%PDF-":
                 f.close()
                 app.logger.warning(

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:645 Invalid PDF signature for document id=1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 114

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -645,7 +645,7 @@
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id
                 )
-                return jsonify({"error": "document not available"}), 415
+                return jsonify({"error": "document not available"}), 416
 
             f.seek(0)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e01b3ecb0b3a644f2: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 115

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -645,7 +645,7 @@
                 app.logger.warning(
                     "Invalid PDF signature for document id=%s", document_id
                 )
-                return jsonify({"error": "document not available"}), 415
+                return jsonify({"error": "document not available"}), 414
 
             f.seek(0)

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb84a0dd57a18b6d4: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 116

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -647,7 +647,7 @@
                 )
                 return jsonify({"error": "document not available"}), 415
 
-            f.seek(0)
+            f.seek( 1)
 
             # Prepare safe filename (preserve existing .pdf if present)
             name = (row.name or "document").strip().replace("\r", "").replace("\n", "")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 117

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -647,7 +647,7 @@
                 )
                 return jsonify({"error": "document not available"}), 415
 
-            f.seek(0)
+            f.seek( -1)
 
             # Prepare safe filename (preserve existing .pdf if present)
             name = (row.name or "document").strip().replace("\r", "").replace("\n", "")

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:687 Error serving file for document id=1: [Errno 22] Invalid argument

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 118

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -663,7 +663,7 @@
                 as_attachment=False,
                 download_name=name,
                 conditional=False,  # enables 304 if If-Modified-Since/Range handling
-                max_age=0,
+                max_age= 1,
                 last_modified=st.st_mtime,
             )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e834953a9d6b0dfed: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 119

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -663,7 +663,7 @@
                 as_attachment=False,
                 download_name=name,
                 conditional=False,  # enables 304 if If-Modified-Since/Range handling
-                max_age=0,
+                max_age= -1,
                 last_modified=st.st_mtime,
             )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231446919752Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231447812515Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 120

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -687,7 +687,7 @@
             app.logger.error(
                 "Error serving file for document id=%s: %s", document_id, e
             )
-            return jsonify({"error": "error serving file"}), 500
+            return jsonify({"error": "error serving file"}), 501
 
     # GET /api/get-version/<link>  ÔåÆ returns the watermarked PDF (inline)
     @app.get("/api/get-version/<link>")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 121

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -687,7 +687,7 @@
             app.logger.error(
                 "Error serving file for document id=%s: %s", document_id, e
             )
-            return jsonify({"error": "error serving file"}), 500
+            return jsonify({"error": "error serving file"}), 499
 
     # GET /api/get-version/<link>  ÔåÆ returns the watermarked PDF (inline)
     @app.get("/api/get-version/<link>")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.88s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 122

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -695,7 +695,7 @@
         # Accept both 32-char (RMAP session secrets) and 64-char (SHA-256 style) tokens
         if not re.fullmatch(r"[0-9a-f]{32}|[0-9a-f]{64}", link):
             app.logger.warning("Invalid version link format: %s", link)
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 405
 
         try:
             with get_engine().connect() as conn:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 123

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -695,7 +695,7 @@
         # Accept both 32-char (RMAP session secrets) and 64-char (SHA-256 style) tokens
         if not re.fullmatch(r"[0-9a-f]{32}|[0-9a-f]{64}", link):
             app.logger.warning("Invalid version link format: %s", link)
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 403
 
         try:
             with get_engine().connect() as conn:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035209740633Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035210647979Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 124

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -713,7 +713,7 @@
         except Exception as e:
             app.logger.error("Database error in get_version: %s", e)
             inc_db_error("get_version")
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 504
 
         if not row:
             app.logger.warning("Version not found for link: %s", link)

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234114984087Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234115873661Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 125

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -713,7 +713,7 @@
         except Exception as e:
             app.logger.error("Database error in get_version: %s", e)
             inc_db_error("get_version")
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 502
 
         if not row:
             app.logger.warning("Version not found for link: %s", link)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 126

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -717,7 +717,7 @@
 
         if not row:
             app.logger.warning("Version not found for link: %s", link)
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 405
 
         try:
             resolved = _safe_resolve_under_storage(row.path, app.config["STORAGE_DIR"])

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203016219120Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203017289544Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 127

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -717,7 +717,7 @@
 
         if not row:
             app.logger.warning("Version not found for link: %s", link)
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 403
 
         try:
             resolved = _safe_resolve_under_storage(row.path, app.config["STORAGE_DIR"])

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 128

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -725,7 +725,7 @@
             app.logger.warning(
                 "Rejected version path for link %s: %s (%s)", link, row.path, exc
             )
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 501
 
         if not resolved.exists():
             app.logger.error("File missing on disk for version link=%s", link)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 129

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -725,7 +725,7 @@
             app.logger.warning(
                 "Rejected version path for link %s: %s (%s)", link, row.path, exc
             )
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 499
 
         if not resolved.exists():
             app.logger.error("File missing on disk for version link=%s", link)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052237987027Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052238904531Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 130

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -729,7 +729,7 @@
 
         if not resolved.exists():
             app.logger.error("File missing on disk for version link=%s", link)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 411
 
         try:
             with resolved.open("rb") as fh:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 131

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -729,7 +729,7 @@
 
         if not resolved.exists():
             app.logger.error("File missing on disk for version link=%s", link)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 409
 
         try:
             with resolved.open("rb") as fh:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 132

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -733,7 +733,7 @@
 
         try:
             with resolved.open("rb") as fh:
-                header = fh.read(5)
+                header = fh.read( 6)
                 if header != b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 133

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -733,7 +733,7 @@
 
         try:
             with resolved.open("rb") as fh:
-                header = fh.read(5)
+                header = fh.read( 4)
                 if header != b"%PDF-":
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef5dde073ec300fba: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.65s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 134

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -738,7 +738,7 @@
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )
-                    return jsonify({"error": "document not available"}), 415
+                    return jsonify({"error": "document not available"}), 416
                 fh.seek(0)
                 last_modified = os.fstat(fh.fileno()).st_mtime
         except OSError:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.77s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 135

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -738,7 +738,7 @@
                     app.logger.warning(
                         "Invalid PDF signature for version link=%s", link
                     )
-                    return jsonify({"error": "document not available"}), 415
+                    return jsonify({"error": "document not available"}), 414
                 fh.seek(0)
                 last_modified = os.fstat(fh.fileno()).st_mtime
         except OSError:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 136

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -739,7 +739,7 @@
                         "Invalid PDF signature for version link=%s", link
                     )
                     return jsonify({"error": "document not available"}), 415
-                fh.seek(0)
+                fh.seek( 1)
                 last_modified = os.fstat(fh.fileno()).st_mtime
         except OSError:
             app.logger.error("File missing on disk for version link=%s", link)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 137

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -739,7 +739,7 @@
                         "Invalid PDF signature for version link=%s", link
                     )
                     return jsonify({"error": "document not available"}), 415
-                fh.seek(0)
+                fh.seek( -1)
                 last_modified = os.fstat(fh.fileno()).st_mtime
         except OSError:
             app.logger.error("File missing on disk for version link=%s", link)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.66s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 138

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -743,7 +743,7 @@
                 last_modified = os.fstat(fh.fileno()).st_mtime
         except OSError:
             app.logger.error("File missing on disk for version link=%s", link)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 411
         except Exception as e:
             app.logger.error("Error inspecting version file for %s: %s", link, e)
             return jsonify({"error": "error serving file"}), 500

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 139

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -743,7 +743,7 @@
                 last_modified = os.fstat(fh.fileno()).st_mtime
         except OSError:
             app.logger.error("File missing on disk for version link=%s", link)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 409
         except Exception as e:
             app.logger.error("Error inspecting version file for %s: %s", link, e)
             return jsonify({"error": "error serving file"}), 500

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002932843237Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002933819517Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 140

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -746,7 +746,7 @@
             return jsonify({"error": "file missing on disk"}), 410
         except Exception as e:
             app.logger.error("Error inspecting version file for %s: %s", link, e)
-            return jsonify({"error": "error serving file"}), 500
+            return jsonify({"error": "error serving file"}), 501
 
         download_name = (
             row.link if row.link.lower().endswith(".pdf") else f"{row.link}.pdf"

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142951030580Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142952012817Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 141

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -746,7 +746,7 @@
             return jsonify({"error": "file missing on disk"}), 410
         except Exception as e:
             app.logger.error("Error inspecting version file for %s: %s", link, e)
-            return jsonify({"error": "error serving file"}), 500
+            return jsonify({"error": "error serving file"}), 499
 
         download_name = (
             row.link if row.link.lower().endswith(".pdf") else f"{row.link}.pdf"

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014704300238Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014705162601Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 142

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -760,7 +760,7 @@
                 as_attachment=False,
                 download_name=safe_download,
                 conditional=True,
-                max_age=0,
+                max_age= 1,
                 last_modified=last_modified,
             )
         except Exception as e:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 143

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -760,7 +760,7 @@
                 as_attachment=False,
                 download_name=safe_download,
                 conditional=True,
-                max_age=0,
+                max_age= -1,
                 last_modified=last_modified,
             )
         except Exception as e:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 144

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -765,7 +765,7 @@
             )
         except Exception as e:
             app.logger.error("Error serving version %s: %s", link, e)
-            return jsonify({"error": "error serving file"}), 500
+            return jsonify({"error": "error serving file"}), 501
 
         resp.headers["Cache-Control"] = "private, max-age=0, must-revalidate"
         resp.headers["Content-Type"] = "application/pdf"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 145

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -765,7 +765,7 @@
             )
         except Exception as e:
             app.logger.error("Error serving version %s: %s", link, e)
-            return jsonify({"error": "error serving file"}), 500
+            return jsonify({"error": "error serving file"}), 499
 
         resp.headers["Cache-Control"] = "private, max-age=0, must-revalidate"
         resp.headers["Content-Type"] = "application/pdf"

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161955962336Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161956856578Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 146

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -812,7 +812,7 @@
 
         if document_id is None:
             app.logger.warning("Document id required for deletion")
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 401
 
         try:
             doc_id = int(document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 147

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -812,7 +812,7 @@
 
         if document_id is None:
             app.logger.warning("Document id required for deletion")
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 399
 
         try:
             doc_id = int(document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 148

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -818,7 +818,7 @@
             doc_id = int(document_id)
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id for deletion: %s", document_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 401
 
         if doc_id <= 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 149

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -818,7 +818,7 @@
             doc_id = int(document_id)
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id for deletion: %s", document_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 399
 
         if doc_id <= 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef5b4fdf2f9352cdc: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 150

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= 1 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 151

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -820,7 +820,7 @@
             app.logger.warning("Invalid document id for deletion: %s", document_id)
             return jsonify({"error": "document id required"}), 400
 
-        if doc_id <= 0 or doc_id > MAX_DB_INT:
+        if doc_id <= -1 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
             return jsonify({"error": "document id required"}), 400

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7d4f5d2542eaa7bf: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 152

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -822,7 +822,7 @@
 
         if doc_id <= 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 401
 
         owner_id = int(g.user["id"])

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 153

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -822,7 +822,7 @@
 
         if doc_id <= 0 or doc_id > MAX_DB_INT:
             app.logger.warning("Non-positive document id for deletion: %s", doc_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 399
 
         owner_id = int(g.user["id"])

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e32da4c31f0d53f46: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 154

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -843,7 +843,7 @@
         except Exception as e:
             app.logger.error("DB delete error for doc id=%s: %s", doc_id, e)
             inc_db_error("delete_document_select")
-            return jsonify({"error": "database error during delete"}), 503
+            return jsonify({"error": "database error during delete"}), 504
 
         if not row:
             # DonÔÇÖt reveal othersÔÇÖ docsÔÇöjust say not found

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 155

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -843,7 +843,7 @@
         except Exception as e:
             app.logger.error("DB delete error for doc id=%s: %s", doc_id, e)
             inc_db_error("delete_document_select")
-            return jsonify({"error": "database error during delete"}), 503
+            return jsonify({"error": "database error during delete"}), 502
 
         if not row:
             # DonÔÇÖt reveal othersÔÇÖ docsÔÇöjust say not found

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5164343dd78f126d: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 156

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -850,7 +850,7 @@
             app.logger.warning(
                 "Document not found or access denied for deletion id=%s", doc_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 405
 
         # Resolve and delete file (best effort)
         storage_root = Path(app.config["STORAGE_DIR"])

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201030487747Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201031392707Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 157

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -850,7 +850,7 @@
             app.logger.warning(
                 "Document not found or access denied for deletion id=%s", doc_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 403
 
         # Resolve and delete file (best effort)
         storage_root = Path(app.config["STORAGE_DIR"])

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 19.91s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 158

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -889,7 +889,7 @@
         except Exception as e:
             app.logger.error("DB delete error for doc id=%s: %s", doc_id, e)
             inc_db_error("delete_document_delete")
-            return jsonify({"error": "database error during delete"}), 503
+            return jsonify({"error": "database error during delete"}), 504
 
         return jsonify(
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 159

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -889,7 +889,7 @@
         except Exception as e:
             app.logger.error("DB delete error for doc id=%s: %s", doc_id, e)
             inc_db_error("delete_document_delete")
-            return jsonify({"error": "database error during delete"}), 503
+            return jsonify({"error": "database error during delete"}), 502
 
         return jsonify(
             {

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ecaee91f0abfa537a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 160

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -899,7 +899,7 @@
                 "file_missing": file_missing,
                 "note": delete_error,  # null/omitted if everything was fine
             }
-        ), 200
+        ), 201
 
     # POST /api/create-watermark or /api/create-watermark/<id>
     # ÔåÆ create watermarked pdf and returns metadata

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T202439113589Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T202440180729Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 161

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -899,7 +899,7 @@
                 "file_missing": file_missing,
                 "note": delete_error,  # null/omitted if everything was fine
             }
-        ), 200
+        ), 199
 
     # POST /api/create-watermark or /api/create-watermark/<id>
     # ÔåÆ create watermarked pdf and returns metadata

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 199 == 200

E        +  where 199 = <WrapperTestResponse streamed [199 UNKNOWN]>.status_code



..\test\test_api.py:443: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 199 == 200

1 failed, 13 passed, 22 warnings in 21.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 162

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -918,7 +918,7 @@
             doc_id = document_id
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id in query: %s", document_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 401
 
         payload = request.get_json(silent=True) or {}
         # allow a couple of aliases for convenience

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 163

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -918,7 +918,7 @@
             doc_id = document_id
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id in query: %s", document_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 399
 
         payload = request.get_json(silent=True) or {}
         # allow a couple of aliases for convenience

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 164

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -932,7 +932,7 @@
         try:
             if doc_id is None:
                 app.logger.warning("Missing document id in request")
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 401
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043829918301Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043830829121Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 165

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -932,7 +932,7 @@
         try:
             if doc_id is None:
                 app.logger.warning("Missing document id in request")
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 399
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:354: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 166

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 1 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175131746264Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 42 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175132647029Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 167

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -934,7 +934,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= -1 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 168

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -935,7 +935,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 401
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 169

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -935,7 +935,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 399
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 170

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -938,7 +938,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
-            return jsonify({"error": "document_id (int) is required"}), 400
+            return jsonify({"error": "document_id (int) is required"}), 401
         if (
             not method
             or not intended_for

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 171

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -938,7 +938,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
-            return jsonify({"error": "document_id (int) is required"}), 400
+            return jsonify({"error": "document_id (int) is required"}), 399
         if (
             not method
             or not intended_for

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 172

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -948,7 +948,7 @@
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify(
                 {"error": "method, intended_for, secret, and key are required"}
-            ), 400
+            ), 401
 
         # lookup the document; enforce ownership
         try:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203202636036Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203203522765Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 173

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -948,7 +948,7 @@
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify(
                 {"error": "method, intended_for, secret, and key are required"}
-            ), 400
+            ), 399
 
         # lookup the document; enforce ownership
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:358: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 174

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -966,7 +966,7 @@
                 ).first()
         except Exception as e:
             app.logger.error("Database error fetching document %s", e)
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 504
 
         if not row:
             app.logger.warning(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 175

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -966,7 +966,7 @@
                 ).first()
         except Exception as e:
             app.logger.error("Database error fetching document %s", e)
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 502
 
         if not row:
             app.logger.warning(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 176

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -972,7 +972,7 @@
             app.logger.warning(
                 "Document not found or access denied for watermarking id=%s", doc_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 405
 
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144030632906Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 405 == 201

E        +  where 405 = <WrapperTestResponse 31 bytes [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144031711451Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 405 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 177

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -972,7 +972,7 @@
             app.logger.warning(
                 "Document not found or access denied for watermarking id=%s", doc_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 403
 
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

>       assert resp.status_code == 404

E       assert 403 == 404

E        +  where 403 = <WrapperTestResponse streamed [403 FORBIDDEN]>.status_code



..\test\test_api.py:350: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 403 == 404

1 failed, 13 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 178

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -984,7 +984,7 @@
             file_path.relative_to(storage_root)
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 501
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 179

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -984,7 +984,7 @@
             file_path.relative_to(storage_root)
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 499
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 180

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -987,7 +987,7 @@
             return jsonify({"error": "document path invalid"}), 500
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 411
 
         # check watermark applicability
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 181

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -987,7 +987,7 @@
             return jsonify({"error": "document path invalid"}), 500
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 409
 
         # check watermark applicability
         try:

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 182

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1001,7 +1001,7 @@
                     method,
                     doc_id,
                 )
-                return jsonify({"error": "watermarking method not applicable"}), 400
+                return jsonify({"error": "watermarking method not applicable"}), 401
         except Exception as e:
             inc_watermark_failed(method, "applicability_exception")
             app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 183

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1001,7 +1001,7 @@
                     method,
                     doc_id,
                 )
-                return jsonify({"error": "watermarking method not applicable"}), 400
+                return jsonify({"error": "watermarking method not applicable"}), 399
         except Exception as e:
             inc_watermark_failed(method, "applicability_exception")
             app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 184

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1007,7 +1007,7 @@
             app.logger.error(
                 "Watermark applicability check failed for document %s: %s", doc_id, e
             )
-            return jsonify({"error": "watermark applicability check failed"}), 400
+            return jsonify({"error": "watermark applicability check failed"}), 401
 
         # apply watermark ÔåÆ bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

>       assert resp.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:346: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 401 == 400

1 failed, 13 passed, 22 warnings in 20.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 185

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1007,7 +1007,7 @@
             app.logger.error(
                 "Watermark applicability check failed for document %s: %s", doc_id, e
             )
-            return jsonify({"error": "watermark applicability check failed"}), 400
+            return jsonify({"error": "watermark applicability check failed"}), 399
 
         # apply watermark ÔåÆ bytes
         try:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:346: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 186

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 1:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 187

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1021,7 +1021,7 @@
                 position=position,
             )
             observe_watermark_duration(method, time.time() - _wm_start)
-            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, (bytes | bytearray)) or len(wm_bytes) == -1:
                 inc_watermark_failed(method, "empty_output")
                 app.logger.error(
                     "Watermarking produced no output for document %s using method %s",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 188

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1028,7 +1028,7 @@
                     doc_id,
                     method,
                 )
-                return jsonify({"error": "watermarking produced no output"}), 500
+                return jsonify({"error": "watermarking produced no output"}), 501
         except Exception as e:
             inc_watermark_failed(method, "exception")
             app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 189

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1028,7 +1028,7 @@
                     doc_id,
                     method,
                 )
-                return jsonify({"error": "watermarking produced no output"}), 500
+                return jsonify({"error": "watermarking produced no output"}), 499
         except Exception as e:
             inc_watermark_failed(method, "exception")
             app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 190

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1037,7 +1037,7 @@
                 method,
                 e,
             )
-            return jsonify({"error": "watermarking failed"}), 500
+            return jsonify({"error": "watermarking failed"}), 501
 
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 191

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1037,7 +1037,7 @@
                 method,
                 e,
             )
-            return jsonify({"error": "watermarking failed"}), 500
+            return jsonify({"error": "watermarking failed"}), 499
 
         # build destination file name: "<original_name>__<intended_to>.pdf"
         base_name = Path(row.name or file_path.name).stem

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024547761980Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024548738664Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 192

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1059,7 +1059,7 @@
                 doc_id,
                 e,
             )
-            return jsonify({"error": "failed to write watermarked file"}), 500
+            return jsonify({"error": "failed to write watermarked file"}), 501
 
         # link token = sha256(watermarked_file_name) - using stronger hash
         link_token = hashlib.sha256(candidate.encode("utf-8")).hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 193

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1059,7 +1059,7 @@
                 doc_id,
                 e,
             )
-            return jsonify({"error": "failed to write watermarked file"}), 500
+            return jsonify({"error": "failed to write watermarked file"}), 499
 
         # link token = sha256(watermarked_file_name) - using stronger hash
         link_token = hashlib.sha256(candidate.encode("utf-8")).hexdigest()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174027273183Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174028142462Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 194

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1098,7 +1098,7 @@
                 "Integrity error during version insert for document %s: %s", doc_id, ie
             )
             inc_db_error("insert_version")
-            return jsonify({"error": "database error during version insert"}), 503
+            return jsonify({"error": "database error during version insert"}), 504
         except Exception:
             try:
                 dest_path.unlink(missing_ok=True)

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

>       assert resp.status_code == 503

E       assert 504 == 503

E        +  where 504 = <WrapperTestResponse streamed [504 GATEWAY TIMEOUT]>.status_code



..\test\test_api.py:342: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 504 == 503

1 failed, 13 passed, 22 warnings in 21.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 195

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1098,7 +1098,7 @@
                 "Integrity error during version insert for document %s: %s", doc_id, ie
             )
             inc_db_error("insert_version")
-            return jsonify({"error": "database error during version insert"}), 503
+            return jsonify({"error": "database error during version insert"}), 502
         except Exception:
             try:
                 dest_path.unlink(missing_ok=True)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5f22414358e84166: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 196

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1110,7 +1110,7 @@
                 "Database error during version insert for document %s", doc_id
             )
             inc_db_error("insert_version")
-            return jsonify({"error": "database error during version insert"}), 503
+            return jsonify({"error": "database error during version insert"}), 504
 
         inc_watermark_created(method)
         return jsonify(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 197

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1110,7 +1110,7 @@
                 "Database error during version insert for document %s", doc_id
             )
             inc_db_error("insert_version")
-            return jsonify({"error": "database error during version insert"}), 503
+            return jsonify({"error": "database error during version insert"}), 502
 
         inc_watermark_created(method)
         return jsonify(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 198

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1124,7 +1124,7 @@
                 "filename": candidate,
                 "size": len(wm_bytes),
             }
-        ), 201
+        ), 202
 
     # GET /api/get-watermarking-methods
     # ÔåÆ {"methods":[{"name":..., "description":...}, ...], "count":N}

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223255420613Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223256376031Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 199

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1124,7 +1124,7 @@
                 "filename": candidate,
                 "size": len(wm_bytes),
             }
-        ), 201
+        ), 200
 
     # GET /api/get-watermarking-methods
     # ÔåÆ {"methods":[{"name":..., "description":...}, ...], "count":N}

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014054813869Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014055692569Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 200

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1137,7 +1137,7 @@
                 {"name": m, "description": WMUtils.get_method(m).get_usage()}
             )
 
-        return jsonify({"methods": methods, "count": len(methods)}), 200
+        return jsonify({"methods": methods, "count": len(methods)}), 201
 
     # POST /api/read-watermark
     @app.post("/api/read-watermark")

...F....FFFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________ test_get_watermarking_methods_route _____________________



client = <FlaskClient <Flask 'server'>>



    def test_get_watermarking_methods_route(client):

        """Test get watermarking methods endpoint."""

        resp = client.get("/api/get-watermarking-methods")

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse 532 bytes [201 CREATED]>.status_code



..\test\test_api.py:301: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e3bdbc103784a3655: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_get_watermarking_methods_route - assert 201 ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 19.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 201

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1137,7 +1137,7 @@
                 {"name": m, "description": WMUtils.get_method(m).get_usage()}
             )
 
-        return jsonify({"methods": methods, "count": len(methods)}), 200
+        return jsonify({"methods": methods, "count": len(methods)}), 199
 
     # POST /api/read-watermark
     @app.post("/api/read-watermark")

........F.....                                                           [100%]

================================== FAILURES ===================================

_____________________ test_get_watermarking_methods_route _____________________



client = <FlaskClient <Flask 'server'>>



    def test_get_watermarking_methods_route(client):

        """Test get watermarking methods endpoint."""

        resp = client.get("/api/get-watermarking-methods")

>       data = resp.get_json()

               ^^^^^^^^^^^^^^^



..\test\test_api.py:298: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\response.py:620: in get_json

    return self.json_module.loads(data)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\json\provider.py:187: in loads

    return json.loads(s, **kwargs)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\__init__.py:346: in loads

    return _default_decoder.decode(s)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:337: in decode

    obj, end = self.raw_decode(s, idx=_w(s, 0).end())

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <json.decoder.JSONDecoder object at 0x0000024EB7458680>, s = '', idx = 0



    def raw_decode(self, s, idx=0):

        """Decode a JSON document from ``s`` (a ``str`` beginning with

        a JSON document) and return a 2-tuple of the Python

        representation and the index in ``s`` where the document ended.

    

        This can be used to decode a JSON document from a string that may

        have extraneous data at the end.

    

        """

        try:

            obj, end = self.scan_once(s, idx)

        except StopIteration as err:

>           raise JSONDecodeError("Expecting value", s, err.value) from None

E           json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\json\decoder.py:355: JSONDecodeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_watermarking_methods_route - json.decode...

1 failed, 13 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 202

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1155,7 +1155,7 @@
             doc_id = document_id
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id in query: %s", document_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 401
 
         payload = request.get_json(silent=True) or {}
         # allow a couple of aliases for convenience

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 203

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1155,7 +1155,7 @@
             doc_id = document_id
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id in query: %s", document_id)
-            return jsonify({"error": "document id required"}), 400
+            return jsonify({"error": "document id required"}), 399
 
         payload = request.get_json(silent=True) or {}
         # allow a couple of aliases for convenience

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 204

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1167,7 +1167,7 @@
         try:
             if doc_id is None:
                 app.logger.warning("Missing document id in request")
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 401
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210905041869Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210906029780Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 21.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 205

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1167,7 +1167,7 @@
         try:
             if doc_id is None:
                 app.logger.warning("Missing document id in request")
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 399
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("secret"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Non existant id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password"})

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:422: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1202 Document not found or access denied for watermark read id=8

WARNING  server:server.py:1169 Missing document id in request

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 206

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= 1 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 207

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1169,7 +1169,7 @@
                 app.logger.warning("Missing document id in request")
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
-            if doc_id <= 0 or doc_id > MAX_DB_INT:
+            if doc_id <= -1 or doc_id > MAX_DB_INT:
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 208

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1170,7 +1170,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 401
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e00d6d9506a3bdffd: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 22.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 209

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1170,7 +1170,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
             doc_id = int(doc_id)
             if doc_id <= 0 or doc_id > MAX_DB_INT:
-                return jsonify({"error": "document_id (int) is required"}), 400
+                return jsonify({"error": "document_id (int) is required"}), 399
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
             return jsonify({"error": "document_id (int) is required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 210

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1173,7 +1173,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
-            return jsonify({"error": "document_id (int) is required"}), 400
+            return jsonify({"error": "document_id (int) is required"}), 401
         if not method or not isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 211

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1173,7 +1173,7 @@
                 return jsonify({"error": "document_id (int) is required"}), 400
         except (TypeError, ValueError):
             app.logger.warning("Invalid document id: %s", document_id)
-            return jsonify({"error": "document_id (int) is required"}), 400
+            return jsonify({"error": "document_id (int) is required"}), 399
         if not method or not isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
             return jsonify({"error": "method, and key are required"}), 400

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 212

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1176,7 +1176,7 @@
             return jsonify({"error": "document_id (int) is required"}), 400
         if not method or not isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
-            return jsonify({"error": "method, and key are required"}), 400
+            return jsonify({"error": "method, and key are required"}), 401
 
         # lookup the document; enforce ownership
         try:

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("secret"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Non existant id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/read-watermark", json={"position": "metadata-only",

                                                        "key": "strong-password", "id": 2})

>       assert resp.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:426: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1202 Document not found or access denied for watermark read id=8

WARNING  server:server.py:1169 Missing document id in request

WARNING  server:server.py:1178 Missing required fields for watermarking: {'id': 2, 'key': 'strong-password', 'position': 'metadata-only'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 401 == 400

1 failed, 13 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 213

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1176,7 +1176,7 @@
             return jsonify({"error": "document_id (int) is required"}), 400
         if not method or not isinstance(method, str) or not isinstance(key, str):
             app.logger.warning("Missing required fields for watermarking: %s", payload)
-            return jsonify({"error": "method, and key are required"}), 400
+            return jsonify({"error": "method, and key are required"}), 399
 
         # lookup the document; enforce ownership
         try:

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("secret"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Non existant id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/read-watermark", json={"position": "metadata-only",

                                                        "key": "strong-password", "id": 2})

>       assert resp.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:426: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1202 Document not found or access denied for watermark read id=8

WARNING  server:server.py:1169 Missing document id in request

WARNING  server:server.py:1178 Missing required fields for watermarking: {'id': 2, 'key': 'strong-password', 'position': 'metadata-only'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 214

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1196,7 +1196,7 @@
             app.logger.error(
                 "Database error fetching document %s for watermark read: %s", doc_id, e
             )
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 504
 
         if not row:
             app.logger.warning(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 215

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1196,7 +1196,7 @@
             app.logger.error(
                 "Database error fetching document %s for watermark read: %s", doc_id, e
             )
-            return jsonify({"error": "database error"}), 503
+            return jsonify({"error": "database error"}), 502
 
         if not row:
             app.logger.warning(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 216

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1202,7 +1202,7 @@
             app.logger.warning(
                 "Document not found or access denied for watermark read id=%s", doc_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 405
 
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("secret"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Non existant id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password", "id": 8})

>       assert resp.status_code == 404

E       assert 405 == 404

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:417: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1202 Document not found or access denied for watermark read id=8

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 405 == 404

1 failed, 13 passed, 22 warnings in 19.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 217

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1202,7 +1202,7 @@
             app.logger.warning(
                 "Document not found or access denied for watermark read id=%s", doc_id
             )
-            return jsonify({"error": "document not found"}), 404
+            return jsonify({"error": "document not found"}), 403
 
         # resolve path safely under STORAGE_DIR
         storage_root = Path(app.config["STORAGE_DIR"]).resolve()

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("secret"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Non existant id

        resp = client.post("/api/read-watermark", json={"method": "overlay-watermark",

                                                        "position": "metadata-only",

                                                        "key": "strong-password", "id": 8})

>       assert resp.status_code == 404

E       assert 403 == 404

E        +  where 403 = <WrapperTestResponse streamed [403 FORBIDDEN]>.status_code



..\test\test_api.py:417: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:1202 Document not found or access denied for watermark read id=8

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 403 == 404

1 failed, 13 passed, 22 warnings in 21.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 218

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1214,7 +1214,7 @@
             file_path.relative_to(storage_root)
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 501
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 219

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1214,7 +1214,7 @@
             file_path.relative_to(storage_root)
         except ValueError:
             app.logger.warning("Rejected document path for id %s: %s", doc_id, row.path)
-            return jsonify({"error": "document path invalid"}), 500
+            return jsonify({"error": "document path invalid"}), 499
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
             return jsonify({"error": "file missing on disk"}), 410

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 220

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1217,7 +1217,7 @@
             return jsonify({"error": "document path invalid"}), 500
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 411
 
         secret = None
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 221

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1217,7 +1217,7 @@
             return jsonify({"error": "document path invalid"}), 500
         if not file_path.exists():
             app.logger.error("File missing on disk for document id=%s", doc_id)
-            return jsonify({"error": "file missing on disk"}), 410
+            return jsonify({"error": "file missing on disk"}), 409
 
         secret = None
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 222

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1226,7 +1226,7 @@
             app.logger.error(
                 "Error when attempting to read watermark for document %s: %s", doc_id, e
             )
-            return jsonify({"error": "error when attempting to read watermark"}), 400
+            return jsonify({"error": "error when attempting to read watermark"}), 401
         inc_watermark_read(method)
         return jsonify(
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.77s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 223

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1226,7 +1226,7 @@
             app.logger.error(
                 "Error when attempting to read watermark for document %s: %s", doc_id, e
             )
-            return jsonify({"error": "error when attempting to read watermark"}), 400
+            return jsonify({"error": "error when attempting to read watermark"}), 399
         inc_watermark_read(method)
         return jsonify(
             {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 224

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1235,7 +1235,7 @@
                 "method": method,
                 "position": position,
             }
-        ), 201
+        ), 202
 
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 202 == 201

E        +  where 202 = <WrapperTestResponse 105 bytes [202 ACCEPTED]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 202 == 201

1 failed, 13 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 225

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1235,7 +1235,7 @@
                 "method": method,
                 "position": position,
             }
-        ), 201
+        ), 200
 
     def _is_authorized_metrics_request() -> bool:
         token_required = os.environ.get("METRICS_TOKEN", "")

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 200 == 201

E        +  where 200 = <WrapperTestResponse 105 bytes [200 OK]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_read_watermark_route - assert 200 == 201

2 failed, 12 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 226

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1251,7 +1251,7 @@
             app.logger.warning(
                 "Unauthorized metrics access attempt from %s", request.remote_addr
             )
-            return jsonify({"error": "not found"}), 404
+            return jsonify({"error": "not found"}), 405
         data = render_prometheus()
         return Response(data, mimetype="text/plain; version=0.0.4")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 227

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1251,7 +1251,7 @@
             app.logger.warning(
                 "Unauthorized metrics access attempt from %s", request.remote_addr
             )
-            return jsonify({"error": "not found"}), 404
+            return jsonify({"error": "not found"}), 403
         data = render_prometheus()
         return Response(data, mimetype="text/plain; version=0.0.4")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.93s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 228

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1262,7 +1262,7 @@
 app = create_app()
 
 if __name__ == "__main__":
-    port = int(os.environ.get("PORT", 5000))
+    port = int(os.environ.get("PORT", 5001))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")
     app.run(host=host, port=port)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e21f6c510616c5d97: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 229

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1262,7 +1262,7 @@
 app = create_app()
 
 if __name__ == "__main__":
-    port = int(os.environ.get("PORT", 5000))
+    port = int(os.environ.get("PORT", 4999))
     # Use localhost by default for security, allow override via environment variable
     host = os.environ.get("HOST", "127.0.0.1")
     app.run(host=host, port=port)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ece8c3631c207ab58: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -96,7 +96,6 @@
         return jsonify({"error": msg}), code
 
     def require_auth(f):
-        @wraps(f)
         def wrapper(*args, **kwargs):
             if app.config['TESTING']:
                 g.user = {"id": 1, "login": "username", "email": "user@email.se"}


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:1261: in <module>

    app = create_app()

          ^^^^^^^^^^^^

server.py:414: in create_app

    @app.get("/api/list-documents")

     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\sansio\scaffold.py:362: in decorator

    self.add_url_rule(rule, endpoint, f, **options)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\sansio\scaffold.py:47: in wrapper_func

    return f(self, *args, **kwargs)

           ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\sansio\app.py:657: in add_url_rule

    raise AssertionError(

E   AssertionError: View function mapping is overwriting an existing endpoint function: wrapper

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T07:58:48+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:58:48+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T07:58:50+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:58:50+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - AssertionError: View function mapping is overwrit...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

8 warnings, 1 error in 13.26s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -130,9 +130,6 @@
             for chunk in iter(lambda: f.read(1024 * 1024), b""):
                 h.update(chunk)
         return h.hexdigest()
-
-    # --- Request instrumentation hooks ---
-    @app.before_request  # type: ignore
     def _tatou_before():
         try:  # record start for latency
             request._tatou_start = time.time()  # type: ignore[attr-defined]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 2

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -147,8 +147,6 @@
                 app.logger.warning("Request size capture failed: %s", exc)
         except Exception as exc:  # pragma: no cover - defensive
             app.logger.warning("before_request instrumentation failed: %s", exc)
-
-    @app.after_request  # type: ignore
     def _tatou_after(resp):
         try:
             start = getattr(request, "_tatou_start", None)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 3

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -159,10 +159,6 @@
         except Exception as exc:  # pragma: no cover - defensive
             app.logger.warning("after_request instrumentation failed: %s", exc)
         return resp
-
-    # --- Routes ---
-
-    @app.route("/<path:filename>")
     def static_files(filename):
         return app.send_static_file(filename)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 4

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -165,8 +165,6 @@
     @app.route("/<path:filename>")
     def static_files(filename):
         return app.send_static_file(filename)
-
-    @app.route("/")
     def home():
         return app.send_static_file("index.html")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 5

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -169,8 +169,6 @@
     @app.route("/")
     def home():
         return app.send_static_file("index.html")
-
-    @app.get("/healthz")
     def healthz():
         try:
             with get_engine().connect() as conn:

F..F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_healthz_route ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_healthz_route(client):

        """Test the health check endpoint."""

        resp = client.get("/healthz")

    

>       assert resp.status_code == 200  # nosec B101

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:56: AssertionError

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:299: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:301 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1054 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:355 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:848 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e82182c29622f9083: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_healthz_route - assert 404 == 200

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 6

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -192,9 +192,6 @@
         if not re.match(r"^[a-zA-Z0-9_-]{3,64}$", login):
             return False, "Invalid login format"
         return True, ""
-
-    # POST /api/create-user {email, login, password}
-    @app.post("/api/create-user")
     def create_user():
         payload = request.get_json(silent=True) or {}
         email = (payload.get("email") or "").strip().lower()

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 405 == 201

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:73: AssertionError

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:269 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:390 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003013954623Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:483 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:607 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:969 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:390 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003014934724Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:847 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 405 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 7

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -237,9 +237,6 @@
             return jsonify({"error": "database error"}), 503
 
         return jsonify({"id": row.id, "email": row.email, "login": row.login}), 201
-
-    # POST /api/login {login, password}
-    @app.post("/api/login")
     def login():
         payload = request.get_json(silent=True) or {}
         email = (payload.get("email") or "").strip()

..F...........                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:117: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - assert 405 == 200

1 failed, 13 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 8

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -293,9 +293,6 @@
                 "expires_in": app.config["TOKEN_TTL_SECONDS"],
             }
         ), 200
-
-    # POST /api/upload-document  (multipart/form-data)
-    @app.post("/api/upload-document")
     @require_auth
     def upload_document():
         if "file" not in request.files:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 405 == 201

E            +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:152: AssertionError

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:429 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:501 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:548 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:597 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:965 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 405 == 201

E            +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:389: AssertionError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:841 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 405 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 405 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 9

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -296,7 +296,6 @@
 
     # POST /api/upload-document  (multipart/form-data)
     @app.post("/api/upload-document")
-    @require_auth
     def upload_document():
         if "file" not in request.files:
             inc_suspicious("upload_missing_file_field")

...F.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:340: in upload_document

    user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

                                                     ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x000001FAC2989580>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:485 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:609 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:971 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:340: in upload_document

    user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

                                                     ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x000001FAC2998FB0>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:849 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - AttributeError: user

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - AttributeError: user

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

6 failed, 8 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 10

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -410,9 +410,6 @@
         }
         inc_upload(int(row.size))
         return jsonify(resp_data), 201
-
-    # GET /api/list-documents
-    @app.get("/api/list-documents")
     @require_auth
     def list_documents():
         try:

....F.........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:198: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_documents_route - assert 404 == 200

1 failed, 13 passed, 22 warnings in 21.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 11

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -413,7 +413,6 @@
 
     # GET /api/list-documents
     @app.get("/api/list-documents")
-    @require_auth
     def list_documents():
         try:
             with get_engine().connect() as conn:

....F.........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

>       resp = client.get("/api/list-documents")

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:194: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:432: in list_documents

    "Database error in list_documents for user=%s", g.user["id"]

                                                    ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x000001C00AA9E630>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_documents_route - AttributeError: user

1 failed, 13 passed, 22 warnings in 20.61s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 12

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -448,9 +448,6 @@
             for r in rows
         ]
         return jsonify({"documents": docs}), 200
-
-    # GET /api/list-versions
-    @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
     @require_auth
     def list_versions(document_id: int | None = None):

.....F........                                                           [100%]

================================== FAILURES ===================================

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

1 failed, 13 passed, 22 warnings in 22.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 13

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -451,7 +451,6 @@
 
     # GET /api/list-versions
     @app.get("/api/list-versions")
-    @app.get("/api/list-versions/<int:document_id>")
     @require_auth
     def list_versions(document_id: int | None = None):
         # Input validation

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 14

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -452,7 +452,6 @@
     # GET /api/list-versions
     @app.get("/api/list-versions")
     @app.get("/api/list-versions/<int:document_id>")
-    @require_auth
     def list_versions(document_id: int | None = None):
         # Input validation
         if document_id is None:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052054079843Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

>       resp = client.get("/api/list-versions", query_string = parameters)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:215: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:504: in list_versions

    f"Database error in list_versions: {document_id},{g.user['id']}"

                                                      ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x0000011D5BC56870>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:550 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:599 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:967 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052055038467Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:843 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - AttributeError: user

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 15

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -519,9 +519,6 @@
             for r in rows
         ]
         return jsonify({"versions": versions}), 200
-
-    # GET /api/list-all-versions
-    @app.get("/api/list-all-versions")
     @require_auth
     def list_all_versions():
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152008687031Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:255: AssertionError

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:597 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:965 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152009526192Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:841 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 16

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -522,7 +522,6 @@
 
     # GET /api/list-all-versions
     @app.get("/api/list-all-versions")
-    @require_auth
     def list_all_versions():
         try:
             # Validate user data from auth token

.FFF.FFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165953442229Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

>       resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:251: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:551: in list_all_versions

    "Database error in list_all_versions for user=%s", g.user["id"]

                                                       ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x000001FF5217BA10>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:609 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:971 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165954469526Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:849 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - AttributeError: user

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 17

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -565,9 +565,6 @@
             for r in rows
         ]
         return jsonify({"versions": versions}), 200
-
-    # GET /api/get-document or /api/get-document/<id>  ÔåÆ returns the PDF (inline)
-    @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
     @require_auth
     def get_document(document_id: int | None = None):

.......F......                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - assert False

1 failed, 13 passed, 22 warnings in 21.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 18

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -568,7 +568,6 @@
 
     # GET /api/get-document or /api/get-document/<id>  ÔåÆ returns the PDF (inline)
     @app.get("/api/get-document")
-    @app.get("/api/get-document/<int:document_id>")
     @require_auth
     def get_document(document_id: int | None = None):
         # Support both path param and ?id=/ ?documentid=

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1055 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:849 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1ca1990627d9c814: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 19

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -569,7 +569,6 @@
     # GET /api/get-document or /api/get-document/<id>  ÔåÆ returns the PDF (inline)
     @app.get("/api/get-document")
     @app.get("/api/get-document/<int:document_id>")
-    @require_auth
     def get_document(document_id: int | None = None):
         # Support both path param and ?id=/ ?documentid=
         if document_id is None:

.......F...F..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

>       resp = client.get("/api/get-document", query_string=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:273: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:600: in get_document

    f"Database error in get_document: {document_id},{g.user['id']}"

                                                     ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x000001B415291460>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

        assert resp.status_code == 200

        #Test file is deleted

>       resp_deletion = client.get("/api/get-document/2")

                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:445: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:600: in get_document

    f"Database error in get_document: {document_id},{g.user['id']}"

                                                     ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x000001B41561BE90>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_document_route - AttributeError: user

FAILED ..\test\test_api.py::test_delete_document_route - AttributeError: user

2 failed, 12 passed, 22 warnings in 21.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 20

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -688,9 +688,6 @@
                 "Error serving file for document id=%s: %s", document_id, e
             )
             return jsonify({"error": "error serving file"}), 500
-
-    # GET /api/get-version/<link>  ÔåÆ returns the watermarked PDF (inline)
-    @app.get("/api/get-version/<link>")
     def get_version(link: str):
         # Accept both 32-char (RMAP session secrets) and 64-char (SHA-256 style) tokens
         if not re.fullmatch(r"[0-9a-f]{32}|[0-9a-f]{64}", link):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 21

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -796,9 +796,6 @@
                     f"path {fp} escapes storage root {storage_root}"
                 ) from None
         return fp
-
-    # DELETE /api/delete-document  (and variants) POST supported for convenience
-    @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
     def delete_document(document_id: int | None = None):

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:443: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - assert 405 == 200

1 failed, 13 passed, 22 warnings in 20.78s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 22

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -799,7 +799,6 @@
 
     # DELETE /api/delete-document  (and variants) POST supported for convenience
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
-    @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
     @require_auth
     def delete_document(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 23

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -800,7 +800,6 @@
     # DELETE /api/delete-document  (and variants) POST supported for convenience
     @app.route("/api/delete-document", methods=["DELETE", "POST"])
     @app.route("/api/delete-document/<document_id>", methods=["DELETE"])
-    @require_auth
     def delete_document(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if document_id in (None, ""):

...........F..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

>       resp = client.delete("/api/delete-document", json=document_id)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:440: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1177: in delete

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:826: in delete_document

    owner_id = int(g.user["id"])

                   ^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <flask.ctx._AppCtxGlobals object at 0x00000208EE645F70>, name = 'user'



    def __getattr__(self, name: str) -> t.Any:

        try:

            return self.__dict__[name]

        except KeyError:

>           raise AttributeError(name) from None

E           AttributeError: user



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\ctx.py:56: AttributeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_delete_document_route - AttributeError: user

1 failed, 13 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 24

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -900,10 +900,6 @@
                 "note": delete_error,  # null/omitted if everything was fine
             }
         ), 200
-
-    # POST /api/create-watermark or /api/create-watermark/<id>
-    # ÔåÆ create watermarked pdf and returns metadata
-    @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
     def create_watermark(document_id: int | None = None):

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 405 == 201

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:322: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 405 == 201

1 failed, 13 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 25

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -904,7 +904,6 @@
     # POST /api/create-watermark or /api/create-watermark/<id>
     # ÔåÆ create watermarked pdf and returns metadata
     @app.post("/api/create-watermark")
-    @app.post("/api/create-watermark/<int:document_id>")
     @require_auth
     def create_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 26

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -905,7 +905,6 @@
     # ÔåÆ create watermarked pdf and returns metadata
     @app.post("/api/create-watermark")
     @app.post("/api/create-watermark/<int:document_id>")
-    @require_auth
     def create_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on GET
         if not document_id:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:967 Database error fetching document user

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

1 failed, 13 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 27

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1125,10 +1125,6 @@
                 "size": len(wm_bytes),
             }
         ), 201
-
-    # GET /api/get-watermarking-methods
-    # ÔåÆ {"methods":[{"name":..., "description":...}, ...], "count":N}
-    @app.get("/api/get-watermarking-methods")
     def get_watermarking_methods():
         methods = []

.FFFFFFFFFFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012418500445Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_____________________ test_get_watermarking_methods_route _____________________



client = <FlaskClient <Flask 'server'>>



    def test_get_watermarking_methods_route(client):

        """Test get watermarking methods endpoint."""

        resp = client.get("/api/get-watermarking-methods")

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:301: AssertionError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012419416248Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_get_watermarking_methods_route - assert 404 ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

11 failed, 3 passed, 22 warnings in 19.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 28

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1138,9 +1138,6 @@
             )
 
         return jsonify({"methods": methods, "count": len(methods)}), 200
-
-    # POST /api/read-watermark
-    @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
     def read_watermark(document_id: int | None = None):

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 405 == 201

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:400: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 405 == 201

1 failed, 13 passed, 22 warnings in 19.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 29

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1141,7 +1141,6 @@
 
     # POST /api/read-watermark
     @app.post("/api/read-watermark")
-    @app.post("/api/read-watermark/<int:document_id>")
     @require_auth
     def read_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 30

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1142,7 +1142,6 @@
     # POST /api/read-watermark
     @app.post("/api/read-watermark")
     @app.post("/api/read-watermark/<int:document_id>")
-    @require_auth
     def read_watermark(document_id: int | None = None):
         # accept id from path, query (?id= / ?documentid=), or JSON body on POST
         if not document_id:

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1195 Database error fetching document 2 for watermark read: user

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

1 failed, 13 passed, 22 warnings in 20.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 31

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1243,8 +1243,6 @@
         if provided != token_required:
             return False
         return True
-
-    @app.get("/metrics")
     def metrics():
         if not _is_authorized_metrics_request():
             # Obscure existence a bit ÔÇô return 404 instead of 403 to casual scans

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 0

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -127,7 +127,7 @@
     def _sha256_file(path: Path) -> str:
         h = hashlib.sha256()
         with path.open("rb") as f:
-            for chunk in iter(lambda: f.read(1024 * 1024), b""):
+            for chunk in []:
                 h.update(chunk)
         return h.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 1

--- mutation diff ---
--- aserver.py
+++ bserver.py
@@ -1132,7 +1132,7 @@
     def get_watermarking_methods():
         methods = []
 
-        for m in WMUtils.METHODS:
+        for m in []:
             methods.append(
                 {"name": m, "description": WMUtils.get_method(m).get_usage()}
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) - amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) - 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) - 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) - value
 
     def render(self) -> str:
         # Prometheus histogram:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' - v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') - '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) - "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045520309391Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045521232089Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.86s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) * amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) * 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) * 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) * value
 
     def render(self) -> str:
         # Prometheus histogram:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' * v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') * '"'
 
 
 _lock = Lock()

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb8b2875e6db2d160: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) * "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e23064893953a3842: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) / amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) / 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) / 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) / value
 
     def render(self) -> str:
         # Prometheus histogram:

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' / v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210336732444Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210337770025Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.82s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') / '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) / "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173345013786Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173345858634Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) // amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012621142234Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012622102598Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) // 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235014093070Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235014996408Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) // 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) // value
 
     def render(self) -> str:
         # Prometheus histogram:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' // v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') // '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) // "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) % amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030248388482Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030249331623Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) % 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163845287218Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163846132408Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) % 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045848483643Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045849397737Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) % value
 
     def render(self) -> str:
         # Prometheus histogram:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' % v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164721175459Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164722103300Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') % '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) % "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec086e6e66d5fdd68: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) ** amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223028161495Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223028996533Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) ** 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164904178776Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164905061623Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) ** 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052859855941Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052900837216Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) ** value
 
     def render(self) -> str:
         # Prometheus histogram:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' ** v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042357492367Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042358493012Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 21.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') ** '"'
 
 
 _lock = Lock()

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033029383441Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033030395915Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) ** "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) >> amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..FF.....FF...                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:288: in login

    inc_login_success()

observability.py:276: in inc_login_success

    LOGIN_SUCCESSES.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_successes_total', help='Successful logins', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) >> amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) >> amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1115: in create_watermark

    inc_watermark_created(method)

observability.py:281: in inc_watermark_created

    WATERMARK_CREATED.inc(method)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_watermarks_created_total', help='Watermarks created', values={}, label_names=('method',))

amount = 1.0, label_values = ('robust-xmp',), key = ('robust-xmp',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) >> amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) >> amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for >>: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

4 failed, 10 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) >> 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) >> 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) >> value
 
     def render(self) -> str:
         # Prometheus histogram:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for >>: 'float' and 'float'

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for >>: 'float' and 'float'

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for >>: 'float' and 'float'

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233354793668Z__input.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for >>: 'float' and 'float'

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for >>: 'float' and 'float'

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233355768149Z__watermarked.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for >>: 'float' and 'float'

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for >>: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' >> v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') >> '"'
 
 
 _lock = Lock()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211816785125Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211817771179Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) >> "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041150010425Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041151087129Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 21.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) << amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..FF.....FF...                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:288: in login

    inc_login_success()

observability.py:276: in inc_login_success

    LOGIN_SUCCESSES.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_successes_total', help='Successful logins', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) << amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for <<: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) << amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for <<: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1115: in create_watermark

    inc_watermark_created(method)

observability.py:281: in inc_watermark_created

    WATERMARK_CREATED.inc(method)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_watermarks_created_total', help='Watermarks created', values={}, label_names=('method',))

amount = 1.0, label_values = ('robust-xmp',), key = ('robust-xmp',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) << amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for <<: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) << amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for <<: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

4 failed, 10 passed, 22 warnings in 21.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) << 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) << 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e396046cc83a6fb69: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 21.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) << value
 
     def render(self) -> str:
         # Prometheus histogram:

.FFF.....FF...                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for <<: 'float' and 'float'

ERROR    server:server.py:236 Database error in create_user: unsupported operand type(s) for <<: 'float' and 'float'

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for <<: 'float' and 'float'

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:284: in login

    observe_db_latency("login_select", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...ogin_select',), 0.5): 1, (('login_select',), 1): 1, (('login_select',), 2.5): 1, (('login_select',), inf): 1}, sums={})

value = 0.10988640785217285, label_values = ('login_select',)

labels = ('login_select',), b = 2.5, inf_key = (('login_select',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) << value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for <<: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...nt',), 0.5): 1, (('insert_document',), 1): 1, (('insert_document',), 2.5): 1, (('insert_document',), inf): 1}, sums={})

value = 0.06377720832824707, label_values = ('insert_document',)

labels = ('insert_document',), b = 2.5, inf_key = (('insert_document',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) << value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for <<: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for <<: 'float' and 'float'

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for <<: 'float' and 'float'

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for <<: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...nt',), 0.5): 2, (('insert_document',), 1): 2, (('insert_document',), 2.5): 2, (('insert_document',), inf): 2}, sums={})

value = 0.05775713920593262, label_values = ('insert_document',)

labels = ('insert_document',), b = 2.5, inf_key = (('insert_document',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) << value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for <<: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for <<: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

5 failed, 9 passed, 22 warnings in 19.78s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' << v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') << '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) << "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051428062409Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051429666030Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 25.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) | amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..FF.....FF...                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:288: in login

    inc_login_success()

observability.py:276: in inc_login_success

    LOGIN_SUCCESSES.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_successes_total', help='Successful logins', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) | amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) | amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1115: in create_watermark

    inc_watermark_created(method)

observability.py:281: in inc_watermark_created

    WATERMARK_CREATED.inc(method)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_watermarks_created_total', help='Watermarks created', values={}, label_names=('method',))

amount = 1.0, label_values = ('robust-xmp',), key = ('robust-xmp',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) | amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) | amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for |: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

4 failed, 10 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) | 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) | 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) | value
 
     def render(self) -> str:
         # Prometheus histogram:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for |: 'float' and 'float'

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for |: 'float' and 'float'

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for |: 'float' and 'float'

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044459311662Z__input.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for |: 'float' and 'float'

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for |: 'float' and 'float'

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044500546182Z__watermarked.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for |: 'float' and 'float'

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for |: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' | v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') | '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) | "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185358548578Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185359544694Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) & amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..FF.....FF...                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:288: in login

    inc_login_success()

observability.py:276: in inc_login_success

    LOGIN_SUCCESSES.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_successes_total', help='Successful logins', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) & amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for &: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) & amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for &: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1115: in create_watermark

    inc_watermark_created(method)

observability.py:281: in inc_watermark_created

    WATERMARK_CREATED.inc(method)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_watermarks_created_total', help='Watermarks created', values={}, label_names=('method',))

amount = 1.0, label_values = ('robust-xmp',), key = ('robust-xmp',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) & amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for &: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) & amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for &: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

4 failed, 10 passed, 22 warnings in 21.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) & 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) & 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) & value
 
     def render(self) -> str:
         # Prometheus histogram:

.FFF.....FF...                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for &: 'float' and 'float'

ERROR    server:server.py:236 Database error in create_user: unsupported operand type(s) for &: 'float' and 'float'

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for &: 'float' and 'float'

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:284: in login

    observe_db_latency("login_select", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...ogin_select',), 0.5): 1, (('login_select',), 1): 1, (('login_select',), 2.5): 1, (('login_select',), inf): 1}, sums={})

value = 0.11174178123474121, label_values = ('login_select',)

labels = ('login_select',), b = 2.5, inf_key = (('login_select',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) & value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for &: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...nt',), 0.5): 1, (('insert_document',), 1): 1, (('insert_document',), 2.5): 1, (('insert_document',), inf): 1}, sums={})

value = 0.04836273193359375, label_values = ('insert_document',)

labels = ('insert_document',), b = 2.5, inf_key = (('insert_document',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) & value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for &: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for &: 'float' and 'float'

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for &: 'float' and 'float'

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for &: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...nt',), 0.5): 2, (('insert_document',), 1): 2, (('insert_document',), 2.5): 2, (('insert_document',), inf): 2}, sums={})

value = 0.05176377296447754, label_values = ('insert_document',)

labels = ('insert_document',), b = 2.5, inf_key = (('insert_document',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) & value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for &: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for &: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

5 failed, 9 passed, 22 warnings in 19.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' & v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') & '"'
 
 
 _lock = Lock()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172535442271Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172536380681Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) & "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042608192569Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042609160463Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 0.0) ^ amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..FF.....FF...                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:288: in login

    inc_login_success()

observability.py:276: in inc_login_success

    LOGIN_SUCCESSES.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_successes_total', help='Successful logins', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) ^ amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for ^: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) ^ amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for ^: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1115: in create_watermark

    inc_watermark_created(method)

observability.py:281: in inc_watermark_created

    WATERMARK_CREATED.inc(method)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_watermarks_created_total', help='Watermarks created', values={}, label_names=('method',))

amount = 1.0, label_values = ('robust-xmp',), key = ('robust-xmp',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) ^ amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for ^: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = (), key = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) != len(self.label_names):  # defensive

            raise ValueError("Label cardinality mismatch")

        key = tuple(label_values)

>       self.values[key] = self.values.get(key, 0.0) ^ amount

                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



observability.py:40: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: unsupported operand type(s) for ^: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - TypeError: unsuppor...

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

4 failed, 10 passed, 22 warnings in 19.81s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) ^ 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) ^ 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 0.0) ^ value
 
     def render(self) -> str:
         # Prometheus histogram:

.FFF.....FF...                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for ^: 'float' and 'float'

ERROR    server:server.py:236 Database error in create_user: unsupported operand type(s) for ^: 'float' and 'float'

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for ^: 'float' and 'float'

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:284: in login

    observe_db_latency("login_select", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...ogin_select',), 0.5): 1, (('login_select',), 1): 1, (('login_select',), 2.5): 1, (('login_select',), inf): 1}, sums={})

value = 0.11115384101867676, label_values = ('login_select',)

labels = ('login_select',), b = 2.5, inf_key = (('login_select',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) ^ value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for ^: 'float' and 'float'

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...nt',), 0.5): 1, (('insert_document',), 1): 1, (('insert_document',), 2.5): 1, (('insert_document',), inf): 1}, sums={})

value = 0.05565619468688965, label_values = ('insert_document',)

labels = ('insert_document',), b = 2.5, inf_key = (('insert_document',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) ^ value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for ^: 'float' and 'float'

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for ^: 'float' and 'float'

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ^: 'float' and 'float'

WARNING  server:server.py:160 after_request instrumentation failed: unsupported operand type(s) for ^: 'float' and 'float'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...t',), 1): 2, (('insert_document',), 2.5): 2, (('insert_document',), inf): 2, (('insert_document',), 0.05): 1}, sums={})

value = 0.04360318183898926, label_values = ('insert_document',)

labels = ('insert_document',), b = 2.5, inf_key = (('insert_document',), inf)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) != len(self.label_names):

            raise ValueError("Label cardinality mismatch")

        labels = tuple(label_values)

        # Increment every bucket whose upper bound is >= value so that

        # stored counts are already cumulative (Prometheus expectation).

        for b in self.buckets:

            if value <= b:

                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1

        # Always increment +Inf bucket count

        inf_key = (labels, float("inf"))

        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

>       self.sums[labels] = self.sums.get(labels, 0.0) ^ value

                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       TypeError: unsupported operand type(s) for ^: 'float' and 'float'



observability.py:76: TypeError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: unsupported operand type(s) for ^: 'float' and 'float'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - TypeError: unsupported operand...

FAILED ..\test\test_api.py::test_upload_document_route - TypeError: unsupport...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - TypeError: unsupporte...

5 failed, 9 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' ^ v.replace('"', '\\"') + '"'
 
 
 _lock = Lock()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020853003251Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020853838632Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -107,7 +107,7 @@
 
 
 def _quote(v: str) -> str:
-    return '"' + v.replace('"', '\\"') + '"'
+    return '"' + v.replace('"', '\\"') ^ '"'
 
 
 _lock = Lock()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -319,7 +319,7 @@
 
 def render_prometheus() -> str:
     parts = [m.render() for m in _ALL]  # type: ignore[attr-defined]
-    return "\n".join(parts) + "\n"
+    return "\n".join(parts) ^ "\n"
 
 
 # Convenience timer context manager (not widely used yet, but available)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() + self._start
         return False

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee5c7a2643dcaa8bc: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.81s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() * self._start
         return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() / self._start
         return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() // self._start
         return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() % self._start
         return False

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013741309528Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013742200840Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() ** self._start
         return False

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053738273815Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053739144596Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() >> self._start
         return False

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031539975613Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031540861662Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() << self._start
         return False

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053510971006Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053511851345Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() | self._start
         return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() & self._start
         return False

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142408053971Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142409049224Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -329,6 +329,6 @@
         return self
 
     def __exit__(self):
-        self.elapsed = time() - self._start
+        self.elapsed = time() ^ self._start
         return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int + None) -> None:
     if size is None or size < 0:
         return
     with _lock:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ece65148554643ef7: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int - None) -> None:
     if size is None or size < 0:
         return
     with _lock:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int * None) -> None:
     if size is None or size < 0:
         return
     with _lock:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int / None) -> None:
     if size is None or size < 0:
         return
     with _lock:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e941fe79501459c6b: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int // None) -> None:
     if size is None or size < 0:
         return
     with _lock:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int % None) -> None:
     if size is None or size < 0:
         return
     with _lock:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int ** None) -> None:
     if size is None or size < 0:
         return
     with _lock:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int >> None) -> None:
     if size is None or size < 0:
         return
     with _lock:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int << None) -> None:
     if size is None or size < 0:
         return
     with _lock:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200426505766Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200427423347Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int & None) -> None:
     if size is None or size < 0:
         return
     with _lock:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180850338455Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180851249389Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -259,7 +259,7 @@
         INFLIGHT.inc(route)
 
 
-def observe_request_size(method: str, route: str, size: int | None) -> None:
+def observe_request_size(method: str, route: str, size: int ^ None) -> None:
     if size is None or size < 0:
         return
     with _lock:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212823055200Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212823905699Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if len(label_values) == len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

..FF.....FF...                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:288: in login

    inc_login_success()

observability.py:276: in inc_login_success

    LOGIN_SUCCESSES.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_successes_total', help='Successful logins', values={}, label_names=())

amount = 1.0, label_values = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) == len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) == len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1115: in create_watermark

    inc_watermark_created(method)

observability.py:281: in inc_watermark_created

    WATERMARK_CREATED.inc(method)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_watermarks_created_total', help='Watermarks created', values={}, label_names=('method',))

amount = 1.0, label_values = ('robust-xmp',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) == len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) == len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_create_watermark_route - ValueError: Label c...

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

4 failed, 10 passed, 22 warnings in 19.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if len(label_values) == len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014644077862Z__input.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014644986488Z__watermarked.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if len(label_values) < len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if len(label_values) < len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033316926856Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033318235331Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if len(label_values) <= len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



self = <sqlalchemy.engine.base.Connection object at 0x0000021C80F85550>

engine = Engine(mysql+pymysql://tatou:***@127.0.0.1:3306/tatou?charset=utf8mb4)

connection = None, _has_events = None, _allow_revalidate = True

_allow_autobegin = True



    def __init__(

        self,

        engine: Engine,

        connection: Optional[PoolProxiedConnection] = None,

        _has_events: Optional[bool] = None,

        _allow_revalidate: bool = True,

        _allow_autobegin: bool = True,

    ):

        """Construct a new Connection."""

        self.engine = engine

        self.dialect = dialect = engine.dialect

    

        if connection is None:

            try:

>               self._dbapi_connection = engine.raw_connection()

                                         ^^^^^^^^^^^^^^^^^^^^^^^



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C80F85AF0>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           pymysql.err.OperationalError: (2013, 'Lost connection to MySQL server during query')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



The above exception was the direct cause of the following exception:



    @app.post("/api/login")

    def login():

        payload = request.get_json(silent=True) or {}

        email = (payload.get("email") or "").strip()

        password = payload.get("password") or ""

    

        if not email or not password:

            app.logger.warning("Missing fields in login attempt: %s", payload)

            return jsonify({"error": "email and password are required"}), 400

    

        start_db = time.time()

        try:

>           with get_engine().connect() as conn:

                 ^^^^^^^^^^^^^^^^^^^^^^



server.py:254: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3277: in connect

    return self._connection_cls(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:145: in __init__

    Connection._handle_dbapi_exception_noconnection(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2440: in _handle_dbapi_exception_noconnection

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: in __init__

    self._dbapi_connection = engine.raw_connection()

                             ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C80F85AF0>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           sqlalchemy.exc.OperationalError: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

E           (Background on this error at: https://sqlalche.me/e/20/e3q8)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:281: in login

    inc_db_error("login_select")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('login_select',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) <= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



self = <sqlalchemy.engine.base.Connection object at 0x0000021C80E8BCE0>

engine = Engine(mysql+pymysql://tatou:***@127.0.0.1:3306/tatou?charset=utf8mb4)

connection = None, _has_events = None, _allow_revalidate = True

_allow_autobegin = True



    def __init__(

        self,

        engine: Engine,

        connection: Optional[PoolProxiedConnection] = None,

        _has_events: Optional[bool] = None,

        _allow_revalidate: bool = True,

        _allow_autobegin: bool = True,

    ):

        """Construct a new Connection."""

        self.engine = engine

        self.dialect = dialect = engine.dialect

    

        if connection is None:

            try:

>               self._dbapi_connection = engine.raw_connection()

                                         ^^^^^^^^^^^^^^^^^^^^^^^



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C81702900>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           pymysql.err.OperationalError: (2013, 'Lost connection to MySQL server during query')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



The above exception was the direct cause of the following exception:



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

>           with get_engine().begin() as conn:



server.py:364: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\contextlib.py:137: in __enter__

    return next(self.gen)

           ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3241: in begin

    with self.connect() as conn:

         ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3277: in connect

    return self._connection_cls(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:145: in __init__

    Connection._handle_dbapi_exception_noconnection(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2440: in _handle_dbapi_exception_noconnection

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: in __init__

    self._dbapi_connection = engine.raw_connection()

                             ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C81702900>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           sqlalchemy.exc.OperationalError: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

E           (Background on this error at: https://sqlalche.me/e/20/e3q8)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:398: in upload_document

    inc_db_error("insert_document")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('insert_document',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) <= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061049427024Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



self = <sqlalchemy.engine.base.Connection object at 0x0000021C80CCC860>

engine = Engine(mysql+pymysql://tatou:***@127.0.0.1:3306/tatou?charset=utf8mb4)

connection = None, _has_events = None, _allow_revalidate = True

_allow_autobegin = True



    def __init__(

        self,

        engine: Engine,

        connection: Optional[PoolProxiedConnection] = None,

        _has_events: Optional[bool] = None,

        _allow_revalidate: bool = True,

        _allow_autobegin: bool = True,

    ):

        """Construct a new Connection."""

        self.engine = engine

        self.dialect = dialect = engine.dialect

    

        if connection is None:

            try:

>               self._dbapi_connection = engine.raw_connection()

                                         ^^^^^^^^^^^^^^^^^^^^^^^



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C80CCCDA0>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           pymysql.err.OperationalError: (2013, 'Lost connection to MySQL server during query')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



The above exception was the direct cause of the following exception:



    @app.get("/api/list-documents")

    @require_auth

    def list_documents():

        try:

>           with get_engine().connect() as conn:

                 ^^^^^^^^^^^^^^^^^^^^^^



server.py:419: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3277: in connect

    return self._connection_cls(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:145: in __init__

    Connection._handle_dbapi_exception_noconnection(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2440: in _handle_dbapi_exception_noconnection

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: in __init__

    self._dbapi_connection = engine.raw_connection()

                             ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C80CCCDA0>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           sqlalchemy.exc.OperationalError: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

E           (Background on this error at: https://sqlalche.me/e/20/e3q8)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

>       resp = client.get("/api/list-documents")

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:194: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:435: in list_documents

    inc_db_error("list_documents")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('list_documents',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) <= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



self = <sqlalchemy.engine.base.Connection object at 0x0000021C8101E480>

engine = Engine(mysql+pymysql://tatou:***@127.0.0.1:3306/tatou?charset=utf8mb4)

connection = None, _has_events = None, _allow_revalidate = True

_allow_autobegin = True



    def __init__(

        self,

        engine: Engine,

        connection: Optional[PoolProxiedConnection] = None,

        _has_events: Optional[bool] = None,

        _allow_revalidate: bool = True,

        _allow_autobegin: bool = True,

    ):

        """Construct a new Connection."""

        self.engine = engine

        self.dialect = dialect = engine.dialect

    

        if connection is None:

            try:

>               self._dbapi_connection = engine.raw_connection()

                                         ^^^^^^^^^^^^^^^^^^^^^^^



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C80FDCC50>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           pymysql.err.OperationalError: (2013, 'Lost connection to MySQL server during query')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



The above exception was the direct cause of the following exception:



document_id = 1



    @app.get("/api/list-versions")

    @app.get("/api/list-versions/<int:document_id>")

    @require_auth

    def list_versions(document_id: int | None = None):

        # Input validation

        if document_id is None:

            document_id = request.args.get("id") or request.args.get("documentid")

            try:

                document_id = int(document_id) if document_id else None

                if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:

                    app.logger.warning("Invalid document id in query")

                    return jsonify({"error": "document id required"}), 400

            except (TypeError, ValueError):

                app.logger.warning("Invalid document id in query")

                return jsonify({"error": "document id required"}), 400

    

        if document_id is None or document_id <= 0 or document_id > MAX_DB_INT:

            return jsonify({"error": "document id required"}), 400

    

        try:

>           with get_engine().connect() as conn:

                 ^^^^^^^^^^^^^^^^^^^^^^



server.py:473: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3277: in connect

    return self._connection_cls(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:145: in __init__

    Connection._handle_dbapi_exception_noconnection(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2440: in _handle_dbapi_exception_noconnection

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: in __init__

    self._dbapi_connection = engine.raw_connection()

                             ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x0000021C80FDCC50>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           sqlalchemy.exc.OperationalError: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

E           (Background on this error at: https://sqlalche.me/e/20/e3q8)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

>       resp = client.get("/api/list-versions", query_string = parameters)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:215: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:507: in list_versions

    inc_db_error("list_versions")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('list_versions',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) <= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:610 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



self = <sqlalchemy.engine.base.Connection object at 0x0000021C82059DF0>

dialect = <sqlalchemy.dialects.mysql.pymysql.MySQLDialect_pymysql object at 0x0000021C820E4F80>

context = <sqlalchemy.dialects.mysql.mysqldb.MySQLExecutionContext_mysqldb object at 0x0000021C820E5520>

statement = <sqlalchemy.dialects.mysql.mysqldb.MySQLCompiler_mysqldb object at 0x0000021C820E5550>

parameters = [{'name': 'Water File', 'ownerid': 1, 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storag...061053810416Z__watermarked.pdf', 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', ...}]



    def _exec_single_context(

        self,

        dialect: Dialect,

        context: ExecutionContext,

        statement: Union[str, Compiled],

        parameters: Optional[_AnyMultiExecuteParams],

    ) -> CursorResult[Any]:

        """continue the _execute_context() method for a single DBAPI

        cursor.execute() or cursor.executemany() call.

    

        """

        if dialect.bind_typing is BindTyping.SETINPUTSIZES:

            generic_setinputsizes = context._prepare_set_input_sizes()

    

            if generic_setinputsizes:

                try:

                    dialect.do_set_input_sizes(

                        context.cursor, generic_setinputsizes, context

                    )

                except BaseException as e:

                    self._handle_dbapi_exception(

                        e, str(statement), parameters, None, context

                    )

    

        cursor, str_statement, parameters = (

            context.cursor,

            context.statement,

            context.parameters,

        )

    

        effective_parameters: Optional[_AnyExecuteParams]

    

        if not context.executemany:

            effective_parameters = parameters[0]

        else:

            effective_parameters = parameters

    

        if self._has_events or self.engine._has_events:

            for fn in self.dispatch.before_cursor_execute:

                str_statement, effective_parameters = fn(

                    self,

                    cursor,

                    str_statement,

                    effective_parameters,

                    context,

                    context.executemany,

                )

    

        if self._echo:

            self._log_info(str_statement)

    

            stats = context._get_cache_stats()

    

            if not self.engine.hide_parameters:

                self._log_info(

                    "[%s] %r",

                    stats,

                    sql_util._repr_params(

                        effective_parameters,

                        batches=10,

                        ismulti=context.executemany,

                    ),

                )

            else:

                self._log_info(

                    "[%s] [SQL parameters hidden due to hide_parameters=True]",

                    stats,

                )

    

        evt_handled: bool = False

        try:

            if context.execute_style is ExecuteStyle.EXECUTEMANY:

                effective_parameters = cast(

                    "_CoreMultiExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_executemany:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_executemany(

                        cursor,

                        str_statement,

                        effective_parameters,

                        context,

                    )

            elif not effective_parameters and context.no_parameters:

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute_no_params:

                        if fn(cursor, str_statement, context):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_execute_no_params(

                        cursor, str_statement, context

                    )

            else:

                effective_parameters = cast(

                    "_CoreSingleExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

>                   self.dialect.do_execute(

                        cursor, str_statement, effective_parameters, context

                    )



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       pymysql.err.IntegrityError: (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



The above exception was the direct cause of the following exception:



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

>               conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )



server.py:365: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1419: in execute

    return meth(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\sql\elements.py:526: in _execute_on_connection

    return connection._execute_clauseelement(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1641: in _execute_clauseelement

    ret = self._execute_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1846: in _execute_context

    return self._exec_single_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1986: in _exec_single_context

    self._handle_dbapi_exception(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2355: in _handle_dbapi_exception

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: in _exec_single_context

    self.dialect.do_execute(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       sqlalchemy.exc.IntegrityError: (pymysql.err.IntegrityError) (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')

E       [SQL: 

E                               INSERT INTO Documents (name, path, ownerid, sha256, size)

E                               VALUES (%(name)s, %(path)s, %(ownerid)s, UNHEX(%(sha256hex)s), %(size)s)

E                           ]

E       [parameters: {'name': 'Water File', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\20251017T061053810416Z__watermarked.pdf', 'ownerid': 1, 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', 'size': 39265}]

E       (Background on this error at: https://sqlalche.me/e/20/gkpj)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:398: in upload_document

    inc_db_error("insert_document")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('insert_document',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) <= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061053810416Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_list_documents_route - ValueError: Label car...

FAILED ..\test\test_api.py::test_list_versions_route - ValueError: Label card...

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 26.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if len(label_values) <= len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

.FFF.....FF...                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: Label cardinality mismatch

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:284: in login

    observe_db_latency("login_select", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.11259961128234863, label_values = ('login_select',)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) <= len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.0381472110748291, label_values = ('insert_document',)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) <= len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: Label cardinality mismatch

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.03791356086730957, label_values = ('insert_document',)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) <= len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

5 failed, 9 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if len(label_values) > len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if len(label_values) > len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if len(label_values) >= len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

..FF.....FF...                                                           [100%]

================================== FAILURES ===================================

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:288: in login

    inc_login_success()

observability.py:276: in inc_login_success

    LOGIN_SUCCESSES.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_successes_total', help='Successful logins', values={}, label_names=())

amount = 1.0, label_values = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) >= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) >= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

>       resp = client.post("/api/create-watermark", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:317: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:1115: in create_watermark

    inc_watermark_created(method)

observability.py:281: in inc_watermark_created

    WATERMARK_CREATED.inc(method)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_watermarks_created_total', help='Watermarks created', values={}, label_names=('method',))

amount = 1.0, label_values = ('robust-xmp',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) >= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:411: in upload_document

    inc_upload(int(row.size))

observability.py:301: in inc_upload

    UPLOADS.inc()

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_uploads_total', help='Number of PDF uploads', values={}, label_names=())

amount = 1.0, label_values = ()



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) >= len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_create_watermark_route - ValueError: Label c...

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

4 failed, 10 passed, 22 warnings in 19.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if len(label_values) >= len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

.FFF.....FF...                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: Label cardinality mismatch

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:284: in login

    observe_db_latency("login_select", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.13947391510009766, label_values = ('login_select',)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) >= len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.05463719367980957, label_values = ('insert_document',)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) >= len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: Label cardinality mismatch

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.04544377326965332, label_values = ('insert_document',)



    def observe(self, value: float, *label_values: str) -> None:

        if len(label_values) >= len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

5 failed, 9 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if len(label_values) is len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



self = <sqlalchemy.engine.base.Connection object at 0x000001DC00B71010>

engine = Engine(mysql+pymysql://tatou:***@127.0.0.1:3306/tatou?charset=utf8mb4)

connection = None, _has_events = None, _allow_revalidate = True

_allow_autobegin = True



    def __init__(

        self,

        engine: Engine,

        connection: Optional[PoolProxiedConnection] = None,

        _has_events: Optional[bool] = None,

        _allow_revalidate: bool = True,

        _allow_autobegin: bool = True,

    ):

        """Construct a new Connection."""

        self.engine = engine

        self.dialect = dialect = engine.dialect

    

        if connection is None:

            try:

>               self._dbapi_connection = engine.raw_connection()

                                         ^^^^^^^^^^^^^^^^^^^^^^^



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x000001DC00B715E0>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           pymysql.err.OperationalError: (2013, 'Lost connection to MySQL server during query')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



The above exception was the direct cause of the following exception:



    @app.post("/api/login")

    def login():

        payload = request.get_json(silent=True) or {}

        email = (payload.get("email") or "").strip()

        password = payload.get("password") or ""

    

        if not email or not password:

            app.logger.warning("Missing fields in login attempt: %s", payload)

            return jsonify({"error": "email and password are required"}), 400

    

        start_db = time.time()

        try:

>           with get_engine().connect() as conn:

                 ^^^^^^^^^^^^^^^^^^^^^^



server.py:254: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3277: in connect

    return self._connection_cls(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:145: in __init__

    Connection._handle_dbapi_exception_noconnection(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2440: in _handle_dbapi_exception_noconnection

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: in __init__

    self._dbapi_connection = engine.raw_connection()

                             ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x000001DC00B715E0>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           sqlalchemy.exc.OperationalError: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

E           (Background on this error at: https://sqlalche.me/e/20/e3q8)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:281: in login

    inc_db_error("login_select")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('login_select',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) is len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



self = <sqlalchemy.engine.base.Connection object at 0x000001DC00A6EA50>

engine = Engine(mysql+pymysql://tatou:***@127.0.0.1:3306/tatou?charset=utf8mb4)

connection = None, _has_events = None, _allow_revalidate = True

_allow_autobegin = True



    def __init__(

        self,

        engine: Engine,

        connection: Optional[PoolProxiedConnection] = None,

        _has_events: Optional[bool] = None,

        _allow_revalidate: bool = True,

        _allow_autobegin: bool = True,

    ):

        """Construct a new Connection."""

        self.engine = engine

        self.dialect = dialect = engine.dialect

    

        if connection is None:

            try:

>               self._dbapi_connection = engine.raw_connection()

                                         ^^^^^^^^^^^^^^^^^^^^^^^



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x000001DC00A6ED20>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           pymysql.err.OperationalError: (2013, 'Lost connection to MySQL server during query')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



The above exception was the direct cause of the following exception:



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

>           with get_engine().begin() as conn:



server.py:364: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\contextlib.py:137: in __enter__

    return next(self.gen)

           ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3241: in begin

    with self.connect() as conn:

         ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3277: in connect

    return self._connection_cls(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:145: in __init__

    Connection._handle_dbapi_exception_noconnection(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2440: in _handle_dbapi_exception_noconnection

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:143: in __init__

    self._dbapi_connection = engine.raw_connection()

                             ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:3301: in raw_connection

    return self.pool.connect()

           ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:447: in connect

    return _ConnectionFairy._checkout(self)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:1264: in _checkout

    fairy = _ConnectionRecord.checkout(pool)

            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:711: in checkout

    rec = pool._do_get()

          ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:177: in _do_get

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\impl.py:175: in _do_get

    return self._create_connection()

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:388: in _create_connection

    return _ConnectionRecord(self)

           ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:673: in __init__

    self.__connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:899: in __connect

    with util.safe_reraise():

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\util\langhelpers.py:224: in __exit__

    raise exc_value.with_traceback(exc_tb)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\pool\base.py:895: in __connect

    self.dbapi_connection = connection = pool._invoke_creator(self)

                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\create.py:661: in connect

    return dialect.connect(*cargs, **cparams)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:629: in connect

    return self.loaded_dbapi.connect(*cargs, **cparams)  # type: ignore[no-any-return]  # NOQA: E501

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:365: in __init__

    self.connect()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:680: in connect

    self._get_server_information()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1099: in _get_server_information

    packet = self._read_packet()

             ^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:751: in _read_packet

    packet_header = self._read_bytes(4)

                    ^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <pymysql.connections.Connection object at 0x000001DC00A6ED20>

num_bytes = 4



    def _read_bytes(self, num_bytes):

        self._sock.settimeout(self._read_timeout)

        while True:

            try:

                data = self._rfile.read(num_bytes)

                break

            except OSError as e:

                if e.errno == errno.EINTR:

                    continue

                self._force_close()

                raise err.OperationalError(

                    CR.CR_SERVER_LOST,

                    f"Lost connection to MySQL server during query ({e})",

                )

            except BaseException:

                # Don't convert unknown exception to MySQLError.

                self._force_close()

                raise

        if len(data) < num_bytes:

            self._force_close()

>           raise err.OperationalError(

                CR.CR_SERVER_LOST, "Lost connection to MySQL server during query"

            )

E           sqlalchemy.exc.OperationalError: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

E           (Background on this error at: https://sqlalche.me/e/20/e3q8)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:805: OperationalError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:398: in upload_document

    inc_db_error("insert_document")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('insert_document',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) is len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175152555283Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:486 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:610 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



self = <sqlalchemy.engine.base.Connection object at 0x000001DC00E06210>

dialect = <sqlalchemy.dialects.mysql.pymysql.MySQLDialect_pymysql object at 0x000001DC00E06750>

context = <sqlalchemy.dialects.mysql.mysqldb.MySQLExecutionContext_mysqldb object at 0x000001DC00E06AB0>

statement = <sqlalchemy.dialects.mysql.mysqldb.MySQLCompiler_mysqldb object at 0x000001DC00E06B10>

parameters = [{'name': 'Water File', 'ownerid': 1, 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storag...175153955789Z__watermarked.pdf', 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', ...}]



    def _exec_single_context(

        self,

        dialect: Dialect,

        context: ExecutionContext,

        statement: Union[str, Compiled],

        parameters: Optional[_AnyMultiExecuteParams],

    ) -> CursorResult[Any]:

        """continue the _execute_context() method for a single DBAPI

        cursor.execute() or cursor.executemany() call.

    

        """

        if dialect.bind_typing is BindTyping.SETINPUTSIZES:

            generic_setinputsizes = context._prepare_set_input_sizes()

    

            if generic_setinputsizes:

                try:

                    dialect.do_set_input_sizes(

                        context.cursor, generic_setinputsizes, context

                    )

                except BaseException as e:

                    self._handle_dbapi_exception(

                        e, str(statement), parameters, None, context

                    )

    

        cursor, str_statement, parameters = (

            context.cursor,

            context.statement,

            context.parameters,

        )

    

        effective_parameters: Optional[_AnyExecuteParams]

    

        if not context.executemany:

            effective_parameters = parameters[0]

        else:

            effective_parameters = parameters

    

        if self._has_events or self.engine._has_events:

            for fn in self.dispatch.before_cursor_execute:

                str_statement, effective_parameters = fn(

                    self,

                    cursor,

                    str_statement,

                    effective_parameters,

                    context,

                    context.executemany,

                )

    

        if self._echo:

            self._log_info(str_statement)

    

            stats = context._get_cache_stats()

    

            if not self.engine.hide_parameters:

                self._log_info(

                    "[%s] %r",

                    stats,

                    sql_util._repr_params(

                        effective_parameters,

                        batches=10,

                        ismulti=context.executemany,

                    ),

                )

            else:

                self._log_info(

                    "[%s] [SQL parameters hidden due to hide_parameters=True]",

                    stats,

                )

    

        evt_handled: bool = False

        try:

            if context.execute_style is ExecuteStyle.EXECUTEMANY:

                effective_parameters = cast(

                    "_CoreMultiExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_executemany:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_executemany(

                        cursor,

                        str_statement,

                        effective_parameters,

                        context,

                    )

            elif not effective_parameters and context.no_parameters:

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute_no_params:

                        if fn(cursor, str_statement, context):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_execute_no_params(

                        cursor, str_statement, context

                    )

            else:

                effective_parameters = cast(

                    "_CoreSingleExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

>                   self.dialect.do_execute(

                        cursor, str_statement, effective_parameters, context

                    )



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       pymysql.err.IntegrityError: (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



The above exception was the direct cause of the following exception:



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

>               conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )



server.py:365: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1419: in execute

    return meth(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\sql\elements.py:526: in _execute_on_connection

    return connection._execute_clauseelement(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1641: in _execute_clauseelement

    ret = self._execute_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1846: in _execute_context

    return self._exec_single_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1986: in _exec_single_context

    self._handle_dbapi_exception(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2355: in _handle_dbapi_exception

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: in _exec_single_context

    self.dialect.do_execute(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       sqlalchemy.exc.IntegrityError: (pymysql.err.IntegrityError) (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')

E       [SQL: 

E                               INSERT INTO Documents (name, path, ownerid, sha256, size)

E                               VALUES (%(name)s, %(path)s, %(ownerid)s, UNHEX(%(sha256hex)s), %(size)s)

E                           ]

E       [parameters: {'name': 'Water File', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\20251016T175153955789Z__watermarked.pdf', 'ownerid': 1, 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', 'size': 39265}]

E       (Background on this error at: https://sqlalche.me/e/20/gkpj)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:398: in upload_document

    inc_db_error("insert_document")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('insert_document',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if len(label_values) is len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175153955789Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if len(label_values) is len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192229009490Z__input.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192229912159Z__watermarked.pdf user=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.71s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if len(label_values) is not len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if len(label_values) is not len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_Eq, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None or size == 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_NotEq, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None or size != 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Lt_LtE, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None or size <= 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023723717472Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T023724611190Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_Gt, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None or size > 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Lt_GtE, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None or size >= 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054504182837Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054505131153Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if value == b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ebbdbac663ed3905c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if value != b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012904950759Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012905942421Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if value < b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141808610287Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141809407367Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if value > b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if value >= b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Is, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if value is b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185749239791Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185750109286Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_IsNot, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if value is not b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is not None or size < 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -34,7 +34,7 @@
     label_names: tuple[str, ...]
 
     def inc(self, *label_values: str, amount: float = 1.0) -> None:
-        if len(label_values) != len(self.label_names):  # defensive
+        if not len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
         self.values[key] = self.values.get(key, 0.0) + amount

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



    @app.post("/api/login")

    def login():

        payload = request.get_json(silent=True) or {}

        email = (payload.get("email") or "").strip()

        password = payload.get("password") or ""

    

        if not email or not password:

            app.logger.warning("Missing fields in login attempt: %s", payload)

            return jsonify({"error": "email and password are required"}), 400

    

        start_db = time.time()

        try:

            with get_engine().connect() as conn:

                row = conn.execute(

                    text(

                        "SELECT id, email, login, hpassword FROM Users "

                        "WHERE email = :email LIMIT 1"

                    ),

                    {"email": email},

                ).first()

    

                # Constant-time comparison to prevent timing attacks

                if row:

                    is_valid = check_password_hash(row.hpassword, password)

                else:

                    # Dummy check to maintain constant time

                    is_valid = False

                    row = None

    

                if not is_valid:

                    app.logger.warning(

                        "Failed login attempt for email: %s",

                        email if email else "<empty>",

                    )

>                   inc_login_failure("invalid_credentials")



server.py:276: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

observability.py:271: in inc_login_failure

    LOGIN_FAILURES.inc(reason)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_login_failures_total', help='Number of failed login attempts', values={}, label_names=('reason',))

amount = 1.0, label_values = ('invalid_credentials',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if not len(label_values) != len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:281: in login

    inc_db_error("login_select")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('login_select',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if not len(label_values) != len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

ERROR    server:server.py:280 Database error in login: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



self = <sqlalchemy.engine.base.Connection object at 0x000001F6AB04ED80>

dialect = <sqlalchemy.dialects.mysql.pymysql.MySQLDialect_pymysql object at 0x000001F6AB04F290>

context = <sqlalchemy.dialects.mysql.mysqldb.MySQLExecutionContext_mysqldb object at 0x000001F6AB04F740>

statement = <sqlalchemy.dialects.mysql.mysqldb.MySQLCompiler_mysqldb object at 0x000001F6AB04EED0>

parameters = [{'name': 'My File', 'ownerid': 1, 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\...51016T163905268469Z__input.pdf', 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', ...}]



    def _exec_single_context(

        self,

        dialect: Dialect,

        context: ExecutionContext,

        statement: Union[str, Compiled],

        parameters: Optional[_AnyMultiExecuteParams],

    ) -> CursorResult[Any]:

        """continue the _execute_context() method for a single DBAPI

        cursor.execute() or cursor.executemany() call.

    

        """

        if dialect.bind_typing is BindTyping.SETINPUTSIZES:

            generic_setinputsizes = context._prepare_set_input_sizes()

    

            if generic_setinputsizes:

                try:

                    dialect.do_set_input_sizes(

                        context.cursor, generic_setinputsizes, context

                    )

                except BaseException as e:

                    self._handle_dbapi_exception(

                        e, str(statement), parameters, None, context

                    )

    

        cursor, str_statement, parameters = (

            context.cursor,

            context.statement,

            context.parameters,

        )

    

        effective_parameters: Optional[_AnyExecuteParams]

    

        if not context.executemany:

            effective_parameters = parameters[0]

        else:

            effective_parameters = parameters

    

        if self._has_events or self.engine._has_events:

            for fn in self.dispatch.before_cursor_execute:

                str_statement, effective_parameters = fn(

                    self,

                    cursor,

                    str_statement,

                    effective_parameters,

                    context,

                    context.executemany,

                )

    

        if self._echo:

            self._log_info(str_statement)

    

            stats = context._get_cache_stats()

    

            if not self.engine.hide_parameters:

                self._log_info(

                    "[%s] %r",

                    stats,

                    sql_util._repr_params(

                        effective_parameters,

                        batches=10,

                        ismulti=context.executemany,

                    ),

                )

            else:

                self._log_info(

                    "[%s] [SQL parameters hidden due to hide_parameters=True]",

                    stats,

                )

    

        evt_handled: bool = False

        try:

            if context.execute_style is ExecuteStyle.EXECUTEMANY:

                effective_parameters = cast(

                    "_CoreMultiExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_executemany:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_executemany(

                        cursor,

                        str_statement,

                        effective_parameters,

                        context,

                    )

            elif not effective_parameters and context.no_parameters:

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute_no_params:

                        if fn(cursor, str_statement, context):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_execute_no_params(

                        cursor, str_statement, context

                    )

            else:

                effective_parameters = cast(

                    "_CoreSingleExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

>                   self.dialect.do_execute(

                        cursor, str_statement, effective_parameters, context

                    )



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       pymysql.err.IntegrityError: (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



The above exception was the direct cause of the following exception:



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

>               conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )



server.py:365: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1419: in execute

    return meth(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\sql\elements.py:526: in _execute_on_connection

    return connection._execute_clauseelement(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1641: in _execute_clauseelement

    ret = self._execute_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1846: in _execute_context

    return self._exec_single_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1986: in _exec_single_context

    self._handle_dbapi_exception(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2355: in _handle_dbapi_exception

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: in _exec_single_context

    self.dialect.do_execute(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       sqlalchemy.exc.IntegrityError: (pymysql.err.IntegrityError) (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')

E       [SQL: 

E                               INSERT INTO Documents (name, path, ownerid, sha256, size)

E                               VALUES (%(name)s, %(path)s, %(ownerid)s, UNHEX(%(sha256hex)s), %(size)s)

E                           ]

E       [parameters: {'name': 'My File', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\20251016T163905268469Z__input.pdf', 'ownerid': 1, 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', 'size': 39265}]

E       (Background on this error at: https://sqlalche.me/e/20/gkpj)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:398: in upload_document

    inc_db_error("insert_document")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('insert_document',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if not len(label_values) != len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163905268469Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:486 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:610 Document not found or access denied for id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



self = <sqlalchemy.engine.base.Connection object at 0x000001F6AB107860>

dialect = <sqlalchemy.dialects.mysql.pymysql.MySQLDialect_pymysql object at 0x000001F6AB107890>

context = <sqlalchemy.dialects.mysql.mysqldb.MySQLExecutionContext_mysqldb object at 0x000001F6AB107FE0>

statement = <sqlalchemy.dialects.mysql.mysqldb.MySQLCompiler_mysqldb object at 0x000001F6AB107E90>

parameters = [{'name': 'Water File', 'ownerid': 1, 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storag...163906690162Z__watermarked.pdf', 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', ...}]



    def _exec_single_context(

        self,

        dialect: Dialect,

        context: ExecutionContext,

        statement: Union[str, Compiled],

        parameters: Optional[_AnyMultiExecuteParams],

    ) -> CursorResult[Any]:

        """continue the _execute_context() method for a single DBAPI

        cursor.execute() or cursor.executemany() call.

    

        """

        if dialect.bind_typing is BindTyping.SETINPUTSIZES:

            generic_setinputsizes = context._prepare_set_input_sizes()

    

            if generic_setinputsizes:

                try:

                    dialect.do_set_input_sizes(

                        context.cursor, generic_setinputsizes, context

                    )

                except BaseException as e:

                    self._handle_dbapi_exception(

                        e, str(statement), parameters, None, context

                    )

    

        cursor, str_statement, parameters = (

            context.cursor,

            context.statement,

            context.parameters,

        )

    

        effective_parameters: Optional[_AnyExecuteParams]

    

        if not context.executemany:

            effective_parameters = parameters[0]

        else:

            effective_parameters = parameters

    

        if self._has_events or self.engine._has_events:

            for fn in self.dispatch.before_cursor_execute:

                str_statement, effective_parameters = fn(

                    self,

                    cursor,

                    str_statement,

                    effective_parameters,

                    context,

                    context.executemany,

                )

    

        if self._echo:

            self._log_info(str_statement)

    

            stats = context._get_cache_stats()

    

            if not self.engine.hide_parameters:

                self._log_info(

                    "[%s] %r",

                    stats,

                    sql_util._repr_params(

                        effective_parameters,

                        batches=10,

                        ismulti=context.executemany,

                    ),

                )

            else:

                self._log_info(

                    "[%s] [SQL parameters hidden due to hide_parameters=True]",

                    stats,

                )

    

        evt_handled: bool = False

        try:

            if context.execute_style is ExecuteStyle.EXECUTEMANY:

                effective_parameters = cast(

                    "_CoreMultiExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_executemany:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_executemany(

                        cursor,

                        str_statement,

                        effective_parameters,

                        context,

                    )

            elif not effective_parameters and context.no_parameters:

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute_no_params:

                        if fn(cursor, str_statement, context):

                            evt_handled = True

                            break

                if not evt_handled:

                    self.dialect.do_execute_no_params(

                        cursor, str_statement, context

                    )

            else:

                effective_parameters = cast(

                    "_CoreSingleExecuteParams", effective_parameters

                )

                if self.dialect._has_events:

                    for fn in self.dialect.dispatch.do_execute:

                        if fn(

                            cursor,

                            str_statement,

                            effective_parameters,

                            context,

                        ):

                            evt_handled = True

                            break

                if not evt_handled:

>                   self.dialect.do_execute(

                        cursor, str_statement, effective_parameters, context

                    )



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       pymysql.err.IntegrityError: (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



The above exception was the direct cause of the following exception:



    @app.post("/api/upload-document")

    @require_auth

    def upload_document():

        if "file" not in request.files:

            inc_suspicious("upload_missing_file_field")

            app.logger.warning("Upload attempt missing 'file' field")

            return jsonify({"error": "file is required (multipart/form-data)"}), 400

    

        file = request.files["file"]

        if not file or file.filename == "":

            app.logger.warning("Upload attempt with empty filename")

            return jsonify({"error": "empty filename"}), 400

    

        start_db = time.time()

        # Validate file size

        MAX_FILE_SIZE = 50 * 1024 * 1024  # 50MB

        if file.content_length and file.content_length > MAX_FILE_SIZE:

            inc_suspicious("upload_oversize")

            app.logger.warning("Upload attempt with oversized file: %s", file.filename)

            return jsonify({"error": "file too large"}), 413

    

        # Validate file type and MIME type

        if file.mimetype != "application/pdf":

            inc_suspicious("upload_bad_mime")

            app.logger.warning(

                "Upload attempt with invalid MIME type: %s", file.mimetype

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

        if not file.filename.lower().endswith(".pdf"):

            inc_suspicious("upload_bad_extension")

            app.logger.warning(

                "Upload attempt with invalid file extension: %s", file.filename

            )

            return jsonify({"error": "only PDF files are allowed"}), 415

    

        # Sanitize filename

        fname = secure_filename(file.filename)

        if not fname:

            app.logger.warning(

                "Upload attempt with invalid filename: %s", file.filename

            )

            return jsonify({"error": "invalid filename"}), 400

    

        user_dir = app.config["STORAGE_DIR"] / "files" / g.user["login"]

        user_dir.mkdir(parents=True, exist_ok=True)

    

        ts = dt.datetime.now(dt.UTC).strftime("%Y%m%dT%H%M%S%fZ")

        final_name = request.form.get("name") or fname

        stored_name = f"{ts}__{fname}"

    

        try:

            # Check for path traversal attempts

            stored_path = (user_dir / stored_name).resolve()

            if not str(stored_path).startswith(str(user_dir.resolve())):

                app.logger.warning("Upload attempt with invalid path: %s", stored_path)

                return jsonify({"error": "invalid path"}), 400

    

            file.save(stored_path)

        except Exception as e:

            app.logger.error("File save error: %s", e)

            return jsonify({"error": "failed to save file"}), 500

    

        sha_hex = _sha256_file(stored_path)

        size = stored_path.stat().st_size

    

        try:

            with get_engine().begin() as conn:

>               conn.execute(

                    text(

                        """

                        INSERT INTO Documents (name, path, ownerid, sha256, size)

                        VALUES (:name, :path, :ownerid, UNHEX(:sha256hex), :size)

                    """

                    ),

                    {

                        "name": final_name,

                        "path": str(stored_path),

                        "ownerid": int(g.user["id"]),

                        "sha256hex": sha_hex,

                        "size": int(size),

                    },

                )



server.py:365: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1419: in execute

    return meth(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\sql\elements.py:526: in _execute_on_connection

    return connection._execute_clauseelement(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1641: in _execute_clauseelement

    ret = self._execute_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1846: in _execute_context

    return self._exec_single_context(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1986: in _exec_single_context

    self._handle_dbapi_exception(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:2355: in _handle_dbapi_exception

    raise sqlalchemy_exception.with_traceback(exc_info[2]) from e

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\base.py:1967: in _exec_single_context

    self.dialect.do_execute(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\sqlalchemy\engine\default.py:951: in do_execute

    cursor.execute(statement, parameters)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:153: in execute

    result = self._query(query)

             ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\cursors.py:322: in _query

    conn.query(q)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:575: in query

    self._affected_rows = self._read_query_result(unbuffered=unbuffered)

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:826: in _read_query_result

    result.read()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:1203: in read

    first_packet = self.connection._read_packet()

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\connections.py:782: in _read_packet

    packet.raise_for_error()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\protocol.py:219: in raise_for_error

    err.raise_mysql_exception(self._data)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



data = b'\xff\xac\x05#23000Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)'



    def raise_mysql_exception(data):

        errno = struct.unpack("<h", data[1:3])[0]

        # https://dev.mysql.com/doc/dev/mysql-server/latest/page_protocol_basic_err_packet.html

        # Error packet has optional sqlstate that is 5 bytes and starts with '#'.

        if data[3] == 0x23:  # '#'

            # sqlstate = data[4:9].decode()

            # TODO: Append (sqlstate) in the error message. This will be come in next minor release.

            errval = data[9:].decode("utf-8", "replace")

        else:

            errval = data[3:].decode("utf-8", "replace")

        errorclass = error_map.get(errno)

        if errorclass is None:

            errorclass = InternalError if errno < 1000 else OperationalError

>       raise errorclass(errno, errval)

E       sqlalchemy.exc.IntegrityError: (pymysql.err.IntegrityError) (1452, 'Cannot add or update a child row: a foreign key constraint fails (`tatou`.`Documents`, CONSTRAINT `fk_documents_owner` FOREIGN KEY (`ownerid`) REFERENCES `Users` (`id`) ON DELETE CASCADE ON UPDATE CASCADE)')

E       [SQL: 

E                               INSERT INTO Documents (name, path, ownerid, sha256, size)

E                               VALUES (%(name)s, %(path)s, %(ownerid)s, UNHEX(%(sha256hex)s), %(size)s)

E                           ]

E       [parameters: {'name': 'Water File', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\20251016T163906690162Z__watermarked.pdf', 'ownerid': 1, 'sha256hex': '5fbac867f5efdd7b0ab5c11456b204ddd08ff8801502c93728be3b38bfafe80c', 'size': 39265}]

E       (Background on this error at: https://sqlalche.me/e/20/gkpj)



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pymysql\err.py:150: IntegrityError



During handling of the above exception, another exception occurred:



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:398: in upload_document

    inc_db_error("insert_document")

observability.py:312: in inc_db_error

    DB_ERRORS.inc(op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = CounterMetric(name='tatou_db_errors_total', help='Database operation errors', values={}, label_names=('operation',))

amount = 1.0, label_values = ('insert_document',)



    def inc(self, *label_values: str, amount: float = 1.0) -> None:

        if not len(label_values) != len(self.label_names):  # defensive

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:38: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163906690162Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:149 before_request instrumentation failed: Label cardinality mismatch

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -62,7 +62,7 @@
     sums: dict[tuple[str, ...], float]
 
     def observe(self, value: float, *label_values: str) -> None:
-        if len(label_values) != len(self.label_names):
+        if not len(label_values) != len(self.label_names):
             raise ValueError("Label cardinality mismatch")
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that

.FFF.....FF...                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:236 Database error in create_user: Label cardinality mismatch

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

>       resp = client.post("/api/login", json=parameters)

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:111: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:284: in login

    observe_db_latency("login_select", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.12988042831420898, label_values = ('login_select',)



    def observe(self, value: float, *label_values: str) -> None:

        if not len(label_values) != len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

>           resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:147: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.07486772537231445, label_values = ('insert_document',)



    def observe(self, value: float, *label_values: str) -> None:

        if not len(label_values) != len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: Label cardinality mismatch

WARNING  server:server.py:160 after_request instrumentation failed: Label cardinality mismatch

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

>           upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:387: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:401: in upload_document

    observe_db_latency("insert_document", time.time() - start_db)

observability.py:317: in observe_db_latency

    DB_QUERY_LATENCY.observe(duration, op)

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = HistogramMetric(name='tatou_db_query_duration_seconds', help='Duration of DB operations (best-effort manual instrument...n)', label_names=('operation',), buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5), counts={}, sums={})

value = 0.03587532043457031, label_values = ('insert_document',)



    def observe(self, value: float, *label_values: str) -> None:

        if not len(label_values) != len(self.label_names):

>           raise ValueError("Label cardinality mismatch")

E           ValueError: Label cardinality mismatch



observability.py:66: ValueError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:147 Request size capture failed: Label cardinality mismatch

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - ValueError: Label cardinality ...

FAILED ..\test\test_api.py::test_upload_document_route - ValueError: Label ca...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - ValueError: Label car...

5 failed, 9 passed, 22 warnings in 20.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -68,7 +68,7 @@
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
-            if value <= b:
+            if not value <= b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -250,7 +250,7 @@
         REQUEST_LATENCY.observe(duration, method, route)
         # decrement in-flight if previously incremented
         key = (route,)
-        if INFLIGHT.values.get(key):
+        if not INFLIGHT.values.get(key):
             INFLIGHT.values[key] -= 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if not size is None or size < 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010434406764Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010435383684Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -25,7 +25,7 @@
 from time import time
 
 
-@dataclass(slots=True)
+@dataclass(slots=False)
 class CounterMetric:
     name: str
     help: str

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -44,7 +44,7 @@
         for labels, value in sorted(self.values.items()):
             label_frag = ",".join(
                 f"{k}={_quote(v)}"
-                for k, v in zip(self.label_names, labels, strict=True)
+                for k, v in zip(self.label_names, labels, strict=False)
             )
             lines.append(f"{self.name}{{{label_frag}}} {value}")
         return "\n".join(lines)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190116605795Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190117491419Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -50,7 +50,7 @@
         return "\n".join(lines)
 
 
-@dataclass(slots=True)
+@dataclass(slots=False)
 class HistogramMetric:
     name: str
     help: str

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -86,7 +86,7 @@
         for labels in label_sets:
             label_frag = ",".join(
                 f"{k}={_quote(v)}"
-                for k, v in zip(self.label_names, labels, strict=True)
+                for k, v in zip(self.label_names, labels, strict=False)
             )
             # Emit stored cumulative counts for each finite bucket
             for b in self.buckets:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052446236908Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052447102690Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -330,5 +330,5 @@
 
     def __exit__(self):
         self.elapsed = time() - self._start
-        return False
-
+        return True
+

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None and size < 0:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152945329940Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152946169234Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -33,7 +33,7 @@
     values: dict[tuple[str, ...], float]
     label_names: tuple[str, ...]
 
-    def inc(self, *label_values: str, amount: float = 1.0) -> None:
+    def inc(self, *label_values: str, amount: float = 2.0) -> None:
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -33,7 +33,7 @@
     values: dict[tuple[str, ...], float]
     label_names: tuple[str, ...]
 
-    def inc(self, *label_values: str, amount: float = 1.0) -> None:
+    def inc(self, *label_values: str, amount: float = 0.0) -> None:
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.52s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, 1.0) + amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -37,7 +37,7 @@
         if len(label_values) != len(self.label_names):  # defensive
             raise ValueError("Label cardinality mismatch")
         key = tuple(label_values)
-        self.values[key] = self.values.get(key, 0.0) + amount
+        self.values[key] = self.values.get(key, -1.0) + amount
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183031515422Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183032406727Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 1) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), -1) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224039568893Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224040484305Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 2
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.93s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -69,7 +69,7 @@
         # stored counts are already cumulative (Prometheus expectation).
         for b in self.buckets:
             if value <= b:
-                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
+                self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 0
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031737064477Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031737902379Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 1) + 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, -1) + 1
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 10

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) + 2
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044929317924Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044930201171Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 11

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -72,7 +72,7 @@
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
-        self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
+        self.counts[inf_key] = self.counts.get(inf_key, 0) + 0
         self.sums[labels] = self.sums.get(labels, 0.0) + value
 
     def render(self) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 12

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, 1.0) + value
 
     def render(self) -> str:
         # Prometheus histogram:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 13

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -73,7 +73,7 @@
         # Always increment +Inf bucket count
         inf_key = (labels, float("inf"))
         self.counts[inf_key] = self.counts.get(inf_key, 0) + 1
-        self.sums[labels] = self.sums.get(labels, 0.0) + value
+        self.sums[labels] = self.sums.get(labels, -1.0) + value
 
     def render(self) -> str:
         # Prometheus histogram:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614efa6ec95cb6bcc5a4: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 14

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -90,7 +90,7 @@
             )
             # Emit stored cumulative counts for each finite bucket
             for b in self.buckets:
-                c = self.counts.get((labels, b), 0)
+                c = self.counts.get((labels, b), 1)
                 lines.append(
                     f"{self.name}_bucket{{{label_frag},le={_quote(repr(b))}}} {c}"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 15

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -90,7 +90,7 @@
             )
             # Emit stored cumulative counts for each finite bucket
             for b in self.buckets:
-                c = self.counts.get((labels, b), 0)
+                c = self.counts.get((labels, b), -1)
                 lines.append(
                     f"{self.name}_bucket{{{label_frag},le={_quote(repr(b))}}} {c}"
                 )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044020319607Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044021252025Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 16

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -95,7 +95,7 @@
                     f"{self.name}_bucket{{{label_frag},le={_quote(repr(b))}}} {c}"
                 )
             # +Inf bucket / total
-            total = self.counts.get((labels, float("inf")), 0)
+            total = self.counts.get((labels, float("inf")), 1)
             lines.append(
                 f"{self.name}_bucket{{{label_frag},le={_quote('+Inf')}}} {total}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 17

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -95,7 +95,7 @@
                     f"{self.name}_bucket{{{label_frag},le={_quote(repr(b))}}} {c}"
                 )
             # +Inf bucket / total
-            total = self.counts.get((labels, float("inf")), 0)
+            total = self.counts.get((labels, float("inf")), -1)
             lines.append(
                 f"{self.name}_bucket{{{label_frag},le={_quote('+Inf')}}} {total}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 18

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -100,7 +100,7 @@
                 f"{self.name}_bucket{{{label_frag},le={_quote('+Inf')}}} {total}"
             )
             lines.append(
-                f"{self.name}_sum{{{label_frag}}} {self.sums.get(labels, 0.0)}"
+                f"{self.name}_sum{{{label_frag}}} {self.sums.get(labels, 1.0)}"
             )
             lines.append(f"{self.name}_count{{{label_frag}}} {total}")
         return "\n".join(lines)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002652814057Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002653747727Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 19

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -100,7 +100,7 @@
                 f"{self.name}_bucket{{{label_frag},le={_quote('+Inf')}}} {total}"
             )
             lines.append(
-                f"{self.name}_sum{{{label_frag}}} {self.sums.get(labels, 0.0)}"
+                f"{self.name}_sum{{{label_frag}}} {self.sums.get(labels, -1.0)}"
             )
             lines.append(f"{self.name}_count{{{label_frag}}} {total}")
         return "\n".join(lines)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143323956805Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143324868218Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 20

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=( 1.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 21

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=( -0.995, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 22

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 1.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 23

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, -0.99, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 24

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 1.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 25

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, -0.975, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 26

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 1.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 27

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, -0.95, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 28

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 1.1, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 29

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, -0.9, 0.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 30

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 1.25, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 31

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, -0.75, 0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 32

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 1.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5a83419b09741a36: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.71s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 33

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, -0.5, 1.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 34

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 2.0, 2.5, 5.0),
     counts={},
     sums={},
 )

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 35

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 0.0, 2.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 36

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 3.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 37

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 1.5, 5.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 38

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 6.0),
     counts={},
     sums={},
 )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233854033410Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233854921495Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 39

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -123,7 +123,7 @@
     name="tatou_http_request_duration_seconds",
     help="Latency in seconds of HTTP requests",
     label_names=("method", "route"),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 4.0),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 40

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=( 1.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160130650020Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160131500317Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 41

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=( -0.999, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011931282143Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011932185191Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 42

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 1.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 43

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, -0.995, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

...F.....FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

4 failed, 10 passed, 22 warnings in 19.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 44

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 1.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193449052231Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193449992413Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 45

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, -0.99, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5d1c4167ccd6ecd9: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 46

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 1.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8db0232e3b4e8ccf: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 47

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, -0.975, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 48

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 1.05, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 49

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, -0.95, 0.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011152725868Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011153625895Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 50

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 1.1, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 51

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, -0.9, 0.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 52

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 1.25, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144952876825Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144953751118Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 53

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, -0.75, 0.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 54

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 1.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 55

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, -0.5, 1, 2.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 56

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 2, 2.5),
     counts={},
     sums={},
 )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194707213537Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194708115582Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 57

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 0, 2.5),
     counts={},
     sums={},
 )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223625268575Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223626119639Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 58

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 3.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 59

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -191,7 +191,7 @@
     name="tatou_db_query_duration_seconds",
     help="Duration of DB operations (best-effort manual instrumentation)",
     label_names=("operation",),
-    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5),
+    buckets=(0.001, 0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 1.5),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 60

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=( 1.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 61

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=( -0.995, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194540171272Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194541187337Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 62

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 1.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 63

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, -0.99, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T202223962468Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T202224813473Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 64

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 1.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 65

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, -0.975, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 66

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 1.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022638433654Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022639339457Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 67

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, -0.95, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 68

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 1.1, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 69

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, -0.9, 0.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e50ce8a7b9fb1d713: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 70

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 1.25, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184800629029Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184801621438Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 71

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, -0.75, 0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 72

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 1.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 73

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, -0.5, 1, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 74

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 2, 2.5, 5, 10),
     counts={},
     sums={},
 )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213306837019Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213307722939Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 75

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 0, 2.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 76

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 3.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 77

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 1.5, 5, 10),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 78

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 6, 10),
     counts={},
     sums={},
 )

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eaf00d2435a860c05: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 79

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 4, 10),
     counts={},
     sums={},
 )

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165301383420Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165302282976Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 80

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 11),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 81

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -199,7 +199,7 @@
     name="tatou_watermark_duration_seconds",
     help="Duration of watermark application per method",
     label_names=("method",),
-    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10),
+    buckets=(0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 9),
     counts={},
     sums={},
 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 82

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -207,8 +207,7 @@
     name="tatou_http_request_body_bytes",
     help="Request body sizes in bytes (Content-Length if present)",
     label_names=("method", "route"),
-    buckets=(
-        100,
+    buckets=( 101,
         500,
         1_000,
         5_000,

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 83

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -207,8 +207,7 @@
     name="tatou_http_request_body_bytes",
     help="Request body sizes in bytes (Content-Length if present)",
     label_names=("method", "route"),
-    buckets=(
-        100,
+    buckets=( 99,
         500,
         1_000,
         5_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 84

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -208,8 +208,7 @@
     help="Request body sizes in bytes (Content-Length if present)",
     label_names=("method", "route"),
     buckets=(
-        100,
-        500,
+        100, 501,
         1_000,
         5_000,
         10_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 85

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -208,8 +208,7 @@
     help="Request body sizes in bytes (Content-Length if present)",
     label_names=("method", "route"),
     buckets=(
-        100,
-        500,
+        100, 499,
         1_000,
         5_000,
         10_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 86

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -209,8 +209,7 @@
     label_names=("method", "route"),
     buckets=(
         100,
-        500,
-        1_000,
+        500, 1001,
         5_000,
         10_000,
         50_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 87

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -209,8 +209,7 @@
     label_names=("method", "route"),
     buckets=(
         100,
-        500,
-        1_000,
+        500, 999,
         5_000,
         10_000,
         50_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 88

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -210,8 +210,7 @@
     buckets=(
         100,
         500,
-        1_000,
-        5_000,
+        1_000, 5001,
         10_000,
         50_000,
         100_000,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002449495575Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002450384804Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 89

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -210,8 +210,7 @@
     buckets=(
         100,
         500,
-        1_000,
-        5_000,
+        1_000, 4999,
         10_000,
         50_000,
         100_000,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eee0a4cb22dbe3442: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 90

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -211,8 +211,7 @@
         100,
         500,
         1_000,
-        5_000,
-        10_000,
+        5_000, 10001,
         50_000,
         100_000,
         500_000,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005815688158Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005816577821Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 91

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -211,8 +211,7 @@
         100,
         500,
         1_000,
-        5_000,
-        10_000,
+        5_000, 9999,
         50_000,
         100_000,
         500_000,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141623709206Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141624552370Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 92

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -212,8 +212,7 @@
         500,
         1_000,
         5_000,
-        10_000,
-        50_000,
+        10_000, 50001,
         100_000,
         500_000,
         1_000_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 93

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -212,8 +212,7 @@
         500,
         1_000,
         5_000,
-        10_000,
-        50_000,
+        10_000, 49999,
         100_000,
         500_000,
         1_000_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 94

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -213,8 +213,7 @@
         1_000,
         5_000,
         10_000,
-        50_000,
-        100_000,
+        50_000, 100001,
         500_000,
         1_000_000,
         5_000_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 95

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -213,8 +213,7 @@
         1_000,
         5_000,
         10_000,
-        50_000,
-        100_000,
+        50_000, 99999,
         500_000,
         1_000_000,
         5_000_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 96

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -214,8 +214,7 @@
         5_000,
         10_000,
         50_000,
-        100_000,
-        500_000,
+        100_000, 500001,
         1_000_000,
         5_000_000,
         25_000_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 97

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -214,8 +214,7 @@
         5_000,
         10_000,
         50_000,
-        100_000,
-        500_000,
+        100_000, 499999,
         1_000_000,
         5_000_000,
         25_000_000,

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182450210745Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182451077374Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 98

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -215,8 +215,7 @@
         10_000,
         50_000,
         100_000,
-        500_000,
-        1_000_000,
+        500_000, 1000001,
         5_000_000,
         25_000_000,
         50_000_000,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e204cae2bffdd28b0: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.72s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 99

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -215,8 +215,7 @@
         10_000,
         50_000,
         100_000,
-        500_000,
-        1_000_000,
+        500_000, 999999,
         5_000_000,
         25_000_000,
         50_000_000,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 100

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -216,8 +216,7 @@
         50_000,
         100_000,
         500_000,
-        1_000_000,
-        5_000_000,
+        1_000_000, 5000001,
         25_000_000,
         50_000_000,
     ),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 101

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -216,8 +216,7 @@
         50_000,
         100_000,
         500_000,
-        1_000_000,
-        5_000_000,
+        1_000_000, 4999999,
         25_000_000,
         50_000_000,
     ),

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000351854104Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000352772993Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 102

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -217,8 +217,7 @@
         100_000,
         500_000,
         1_000_000,
-        5_000_000,
-        25_000_000,
+        5_000_000, 25000001,
         50_000_000,
     ),
     counts={},

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 103

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -217,8 +217,7 @@
         100_000,
         500_000,
         1_000_000,
-        5_000_000,
-        25_000_000,
+        5_000_000, 24999999,
         50_000_000,
     ),
     counts={},

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021447644031Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021448577217Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 104

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -218,8 +218,7 @@
         500_000,
         1_000_000,
         5_000_000,
-        25_000_000,
-        50_000_000,
+        25_000_000, 50000001,
     ),
     counts={},
     sums={},

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 105

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -218,8 +218,7 @@
         500_000,
         1_000_000,
         5_000_000,
-        25_000_000,
-        50_000_000,
+        25_000_000, 49999999,
     ),
     counts={},
     sums={},

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 106

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -251,7 +251,7 @@
         # decrement in-flight if previously incremented
         key = (route,)
         if INFLIGHT.values.get(key):
-            INFLIGHT.values[key] -= 1
+            INFLIGHT.values[key] -= 2
 
 
 def inc_inflight(route: str) -> None:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 107

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -251,7 +251,7 @@
         # decrement in-flight if previously incremented
         key = (route,)
         if INFLIGHT.values.get(key):
-            INFLIGHT.values[key] -= 1
+            INFLIGHT.values[key] -= 0
 
 
 def inc_inflight(route: str) -> None:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 108

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None or size < 1:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 109

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -260,7 +260,7 @@
 
 
 def observe_request_size(method: str, route: str, size: int | None) -> None:
-    if size is None or size < 0:
+    if size is None or size < -1:
         return
     with _lock:
         REQUEST_BODY_SIZE.observe(float(size), method, route)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -23,9 +23,6 @@
 from dataclasses import dataclass
 from threading import Lock
 from time import time
-
-
-@dataclass(slots=True)
 class CounterMetric:
     name: str
     help: str


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:17: in <module>

    from observability import (

observability.py:113: in <module>

    REQUESTS = CounterMetric(

E   TypeError: CounterMetric() takes no arguments

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:05:02+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:05:02+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T03:05:03+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:05:03+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: CounterMetric() takes no arguments

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -48,9 +48,6 @@
             )
             lines.append(f"{self.name}{{{label_frag}}} {value}")
         return "\n".join(lines)
-
-
-@dataclass(slots=True)
 class HistogramMetric:
     name: str
     help: str


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:17: in <module>

    from observability import (

observability.py:119: in <module>

    REQUEST_LATENCY = HistogramMetric(

E   TypeError: HistogramMetric() takes no arguments

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T17:54:04+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:54:05+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T17:54:06+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:54:06+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: HistogramMetric() takes no arguments

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 0

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -41,7 +41,7 @@
 
     def render(self) -> str:
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} counter"]
-        for labels, value in sorted(self.values.items()):
+        for labels, value in []:
             label_frag = ",".join(
                 f"{k}={_quote(v)}"
                 for k, v in zip(self.label_names, labels, strict=True)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ZeroIterationForLoop, occurrence: 1

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -67,7 +67,7 @@
         labels = tuple(label_values)
         # Increment every bucket whose upper bound is >= value so that
         # stored counts are already cumulative (Prometheus expectation).
-        for b in self.buckets:
+        for b in []:
             if value <= b:
                 self.counts[(labels, b)] = self.counts.get((labels, b), 0) + 1
         # Always increment +Inf bucket count

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035732035589Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035733165604Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 2

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -83,7 +83,7 @@
         # <name>_count{...} <total>
         lines = [f"# HELP {self.name} {self.help}", f"# TYPE {self.name} histogram"]
         label_sets = sorted({lbl for (lbl, _le) in self.counts.keys()})
-        for labels in label_sets:
+        for labels in []:
             label_frag = ",".join(
                 f"{k}={_quote(v)}"
                 for k, v in zip(self.label_names, labels, strict=True)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ZeroIterationForLoop, occurrence: 3

--- mutation diff ---
--- aobservability.py
+++ bobservability.py
@@ -89,7 +89,7 @@
                 for k, v in zip(self.label_names, labels, strict=True)
             )
             # Emit stored cumulative counts for each finite bucket
-            for b in self.buckets:
+            for b in []:
                 c = self.counts.get((labels, b), 0)
                 lines.append(
                     f"{self.name}_bucket{{{label_frag},le={_quote(repr(b))}}} {c}"

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T221720819984Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T221721683285Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.90s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC - payload + b"\n"
         return out
 
     def is_watermark_applicable(

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061835060378Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061836026996Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload - b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx - len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT - secret_bytes, hashlib.sha256)
         return hm.hexdigest()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043222410039Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043223552968Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC * payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload * b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx * len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT * secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC / payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload / b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx / len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011733070699Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011734010597Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT / secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC // payload + b"\n"
         return out
 
     def is_watermark_applicable(

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e2aad559a791f147a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload // b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx // len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT // secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC % payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload % b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx % len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT % secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC ** payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload ** b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx ** len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT ** secret_bytes, hashlib.sha256)
         return hm.hexdigest()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T204442382823Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T204443519366Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC >> payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload >> b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx >> len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235459961301Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235500865944Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT >> secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC << payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload << b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx << len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151447703609Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151448629979Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT << secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC | payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload | b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx | len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191249095415Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191249989095Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT | secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC & payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.90s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload & b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx & len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT & secret_bytes, hashlib.sha256)
         return hm.hexdigest()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC ^ payload + b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -102,7 +102,7 @@
         out = data
         if not out.endswith(b"\n"):
             out += b"\n"
-        out += self._MAGIC + payload + b"\n"
+        out += self._MAGIC + payload ^ b"\n"
         return out
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -127,7 +127,7 @@
         if idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
-        start = idx + len(self._MAGIC)
+        start = idx ^ len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -181,7 +181,7 @@
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:
         """Compute HMAC-SHA256 over the contextualized secret and return hex."""
-        hm = hmac.new(key.encode("utf-8"), self._CONTEXT + secret_bytes, hashlib.sha256)
+        hm = hmac.new(key.encode("utf-8"), self._CONTEXT ^ secret_bytes, hashlib.sha256)
         return hm.hexdigest()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211341377387Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211342421245Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str + None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bool:
         return True

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed51c8396a94e3ee5: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str - None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str * None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T140921380706Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T140922435063Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.65s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str / None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e37eb9b6d2ce341b9: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str // None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211214801802Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211215876125Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 21.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bool:
         return True

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061941469797Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061942343936Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str % None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042629347829Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042630374551Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ** None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str >> None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e6851c30e8ed5ee31: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bool:
         return True

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173107120465Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173107991813Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str << None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str & None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 26.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -78,7 +78,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ^ None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -79,7 +79,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033644419145Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033645461945Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -108,7 +108,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bool:
         return True

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1f97ab0eeefebf82: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.62s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx != -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl != -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) and payload.get("v") != 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx < -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl < -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) and payload.get("v") < 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx <= -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl <= -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) and payload.get("v") <= 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx > -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060447697308Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060448580786Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl > -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054920477317Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054921392657Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) and payload.get("v") > 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx >= -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl >= -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) and payload.get("v") >= 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212631568314Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212632591526Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 22.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx is -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl is -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx is not -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042502098644Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042503532452Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl is not -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035814336065Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035815328769Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if payload.get("alg") == "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if payload.get("alg") < "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155512428361Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155513347631Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if payload.get("alg") <= "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if payload.get("alg") > "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021225566639Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021226410680Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if payload.get("alg") >= "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144528743775Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144529604323Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if payload.get("alg") is "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142156476519Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142157469575Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if payload.get("alg") is not "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_USub_UAdd, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx == +1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_USub_UAdd, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl == +1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_USub_Invert, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx == ~1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_USub_Invert, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl == ~1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_USub_Not, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx == not 1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_USub_Not, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl == not 1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052506725068Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052507606376Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_USub, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx == 1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_USub, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl == 1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -87,7 +87,7 @@
         ignored by this method.
         """
         data = load_pdf_bytes(pdf)
-        if not secret:
+        if  secret:
             raise ValueError("Secret must be a non-empty string")
         if not isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -89,7 +89,7 @@
         data = load_pdf_bytes(pdf)
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if  isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")
 
         payload = self._build_payload(secret, key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -89,7 +89,7 @@
         data = load_pdf_bytes(pdf)
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if not isinstance(key, str) or  key:
             raise ValueError("Key must be a non-empty string")
 
         payload = self._build_payload(secret, key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -100,7 +100,7 @@
         # We do not alter the original bytes to preserve determinism and
         # avoid invalidating existing xref tables.
         out = data
-        if not out.endswith(b"\n"):
+        if  out.endswith(b"\n"):
             out += b"\n"
         out += self._MAGIC + payload + b"\n"
         return out

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e48954d789193e41c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.73s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 4

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -120,7 +120,7 @@
         does not validate under the given key.
         """
         data = load_pdf_bytes(pdf)
-        if not isinstance(key, str) or not key:
+        if  isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.73s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 5

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -120,7 +120,7 @@
         does not validate under the given key.
         """
         data = load_pdf_bytes(pdf)
-        if not isinstance(key, str) or not key:
+        if not isinstance(key, str) or  key:
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 6

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -132,7 +132,7 @@
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl
         b64_payload = data[start:end].strip()
-        if not b64_payload:
+        if  b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 7

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if  (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150610823992Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150611701041Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 8

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -156,7 +156,7 @@
             raise SecretNotFoundError("Invalid payload fields") from exc
 
         expected = self._mac_hex(secret_bytes, key)
-        if not hmac.compare_digest(mac_hex, expected):
+        if  hmac.compare_digest(mac_hex, expected):
             raise InvalidKeyError("Provided key failed to authenticate the watermark")
 
         return secret_bytes.decode("utf-8")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -87,7 +87,7 @@
         ignored by this method.
         """
         data = load_pdf_bytes(pdf)
-        if not secret:
+        if not not secret:
             raise ValueError("Secret must be a non-empty string")
         if not isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -89,7 +89,7 @@
         data = load_pdf_bytes(pdf)
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if not not isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")
 
         payload = self._build_payload(secret, key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -100,7 +100,7 @@
         # We do not alter the original bytes to preserve determinism and
         # avoid invalidating existing xref tables.
         out = data
-        if not out.endswith(b"\n"):
+        if not not out.endswith(b"\n"):
             out += b"\n"
         out += self._MAGIC + payload + b"\n"
         return out

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -120,7 +120,7 @@
         does not validate under the given key.
         """
         data = load_pdf_bytes(pdf)
-        if not isinstance(key, str) or not key:
+        if not not isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if not idx == -1:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005223710191Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005224600200Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if not end_nl == -1 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041319269114Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041320235702Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 20.85s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 6

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -132,7 +132,7 @@
         end_nl = data.find(b"\n", start)
         end = len(data) if end_nl == -1 else end_nl
         b64_payload = data[start:end].strip()
-        if not b64_payload:
+        if not not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 7

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 8

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -143,7 +143,7 @@
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
-        if payload.get("alg") != "HMAC-SHA256":
+        if not payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(
                 f"Unsupported MAC algorithm: {payload.get('alg')!r}"
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 9

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -156,7 +156,7 @@
             raise SecretNotFoundError("Invalid payload fields") from exc
 
         expected = self._mac_hex(secret_bytes, key)
-        if not hmac.compare_digest(mac_hex, expected):
+        if not not hmac.compare_digest(mac_hex, expected):
             raise InvalidKeyError("Provided key failed to authenticate the watermark")
 
         return secret_bytes.decode("utf-8")

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e07d40a7e01619a6c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -110,7 +110,7 @@
         pdf: PdfSource,
         position: str | None = None,
     ) -> bool:
-        return True
+        return False
 
     def read_secret(self, pdf, key: str) -> str:
         """Extract the secret if present and authenticated by ``key``.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -176,7 +176,7 @@
             "secret": base64.b64encode(secret_bytes).decode("ascii"),
         }
         # Compact JSON for determinism
-        j = json.dumps(obj, separators=(",", ":"), ensure_ascii=True).encode("utf-8")
+        j = json.dumps(obj, separators=(",", ":"), ensure_ascii=False).encode("utf-8")
         return base64.urlsafe_b64encode(j)
 
     def _mac_hex(self, secret_bytes: bytes, key: str) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceAndWithOr, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) or payload.get("v") == 1):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e26514eb9f82b4994: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -89,7 +89,7 @@
         data = load_pdf_bytes(pdf)
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if not isinstance(key, str) and not key:
             raise ValueError("Key must be a non-empty string")
 
         payload = self._build_payload(secret, key)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205245781932Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205247279909Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 23.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -120,7 +120,7 @@
         does not validate under the given key.
         """
         data = load_pdf_bytes(pdf)
-        if not isinstance(key, str) or not key:
+        if not isinstance(key, str) and not key:
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -138,7 +138,7 @@
         try:
             payload_json = base64.urlsafe_b64decode(b64_payload)
             payload = json.loads(payload_json)
-        except Exception as exc:  # broad: malformed or tampered
+        except CosmicRayTestingException as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
         if not (isinstance(payload, dict) and payload.get("v") == 1):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -152,7 +152,7 @@
             mac_hex = str(payload["mac"])  # stored as hex string
             secret_b64 = str(payload["secret"]).encode("ascii")
             secret_bytes = base64.b64decode(secret_b64)
-        except Exception as exc:
+        except CosmicRayTestingException as exc:
             raise SecretNotFoundError("Invalid payload fields") from exc
 
         expected = self._mac_hex(secret_bytes, key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx == - 2:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -124,7 +124,7 @@
             raise ValueError("Key must be a non-empty string")
 
         idx = data.rfind(self._MAGIC)
-        if idx == -1:
+        if idx == - 0:
             raise SecretNotFoundError("No AddAfterEOF watermark found")
 
         start = idx + len(self._MAGIC)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ea47b6ee23269595f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl == - 2 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e463646957006aba2: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -130,7 +130,7 @@
         start = idx + len(self._MAGIC)
         # Payload ends at the next newline or EOF
         end_nl = data.find(b"\n", start)
-        end = len(data) if end_nl == -1 else end_nl
+        end = len(data) if end_nl == - 0 else end_nl
         b64_payload = data[start:end].strip()
         if not b64_payload:
             raise SecretNotFoundError("Found marker but empty payload")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) and payload.get("v") == 2):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -141,7 +141,7 @@
         except Exception as exc:  # broad: malformed or tampered
             raise SecretNotFoundError("Malformed watermark payload") from exc
 
-        if not (isinstance(payload, dict) and payload.get("v") == 1):
+        if not (isinstance(payload, dict) and payload.get("v") == 0):
             raise SecretNotFoundError("Unsupported watermark version or format")
         if payload.get("alg") != "HMAC-SHA256":
             raise WatermarkingError(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -170,7 +170,7 @@
         secret_bytes = secret.encode("utf-8")
         mac_hex = self._mac_hex(secret_bytes, key)
         obj = {
-            "v": 1,
+            "v": 2,
             "alg": "HMAC-SHA256",
             "mac": mac_hex,
             "secret": base64.b64encode(secret_bytes).decode("ascii"),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -170,7 +170,7 @@
         secret_bytes = secret.encode("utf-8")
         mac_hex = self._mac_hex(secret_bytes, key)
         obj = {
-            "v": 1,
+            "v": 0,
             "alg": "HMAC-SHA256",
             "mac": mac_hex,
             "secret": base64.b64encode(secret_bytes).decode("ascii"),

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- aold methods\add_after_eof.py
+++ bold methods\add_after_eof.py
@@ -61,12 +61,6 @@
     # Constants
     _MAGIC: Final[bytes] = b"\n%%WM-ADD-AFTER-EOF:v1\n"
     _CONTEXT: Final[bytes] = b"wm:add-after-eof:v1:"
-
-    # ---------------------
-    # Public API overrides
-    # ---------------------
-
-    @staticmethod
     def get_usage() -> str:
         return (
             "Toy method that appends a watermark record after the PDF EOF. "

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee69181ee2b4ff442: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] + None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] - None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185831661147Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185832587381Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] * None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e3bb5480ae77e8512: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] / None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185706346074Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185707351999Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] // None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] % None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224806282449Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224807160338Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] ** None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] >> None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022658622290Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022659496463Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] << None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] & None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -226,7 +226,7 @@
 # --------------------
 
 
-def main(argv: Iterable[str] | None = None) -> int:
+def main(argv: Iterable[str] ^ None = None) -> int:
     parser = build_parser()
     args = parser.parse_args(list(argv) if argv is not None else None)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if __name__ != "__main__":
     raise SystemExit(main())

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if __name__ < "__main__":
     raise SystemExit(main())

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if __name__ <= "__main__":
     raise SystemExit(main())

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if __name__ > "__main__":
     raise SystemExit(main())

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015355460824Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015356391256Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if __name__ >= "__main__":
     raise SystemExit(main())

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if __name__ is "__main__":
     raise SystemExit(main())

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if __name__ is not "__main__":
     raise SystemExit(main())

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5e1aedd441ec4345: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -63,7 +63,7 @@
 
 
 def _resolve_secret(args: argparse.Namespace) -> str:
-    if args.secret is not None:
+    if args.secret is None:
         return args.secret
     if args.secret_file is not None:
         return _read_text_from_file(args.secret_file)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055702591624Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055703586068Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 1

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -65,7 +65,7 @@
 def _resolve_secret(args: argparse.Namespace) -> str:
     if args.secret is not None:
         return args.secret
-    if args.secret_file is not None:
+    if args.secret_file is None:
         return _read_text_from_file(args.secret_file)
     if args.secret_stdin:
         return _read_text_from_stdin()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 2

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -74,7 +74,7 @@
 
 
 def _resolve_key(args: argparse.Namespace) -> str:
-    if args.key is not None:
+    if args.key is None:
         return args.key
     if args.key_file is not None:
         return _read_text_from_file(args.key_file).strip("\n\r")

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e057f9667c873b382: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 22.72s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 3

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -76,7 +76,7 @@
 def _resolve_key(args: argparse.Namespace) -> str:
     if args.key is not None:
         return args.key
-    if args.key_file is not None:
+    if args.key_file is None:
         return _read_text_from_file(args.key_file).strip("\n\r")
     if args.key_stdin:
         return _read_text_from_stdin().strip("\n\r")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 4

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -228,7 +228,7 @@
 
 def main(argv: Iterable[str] | None = None) -> int:
     parser = build_parser()
-    args = parser.parse_args(list(argv) if argv is not None else None)
+    args = parser.parse_args(list(argv) if argv is None else None)
 
     try:
         return int(args.func(args))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -57,7 +57,7 @@
 
 def _read_text_from_stdin() -> str:
     data = sys.stdin.read()
-    if not data:
+    if  data:
         raise ValueError("No data received on stdin")
     return data

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -111,7 +111,7 @@
 def cmd_embed(args: argparse.Namespace) -> int:
     key = _resolve_key(args)
     secret = _resolve_secret(args)
-    if not is_watermarking_applicable(
+    if  is_watermarking_applicable(
         method=args.method, pdf=args.input, position=args.position
     ):
         print(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -57,7 +57,7 @@
 
 def _read_text_from_stdin() -> str:
     data = sys.stdin.read()
-    if not data:
+    if not not data:
         raise ValueError("No data received on stdin")
     return data

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0941958019bb95cd: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -63,7 +63,7 @@
 
 
 def _resolve_secret(args: argparse.Namespace) -> str:
-    if args.secret is not None:
+    if not args.secret is not None:
         return args.secret
     if args.secret_file is not None:
         return _read_text_from_file(args.secret_file)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164027696091Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164028594021Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -65,7 +65,7 @@
 def _resolve_secret(args: argparse.Namespace) -> str:
     if args.secret is not None:
         return args.secret
-    if args.secret_file is not None:
+    if not args.secret_file is not None:
         return _read_text_from_file(args.secret_file)
     if args.secret_stdin:
         return _read_text_from_stdin()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034942049012Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034943051045Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -67,7 +67,7 @@
         return args.secret
     if args.secret_file is not None:
         return _read_text_from_file(args.secret_file)
-    if args.secret_stdin:
+    if not args.secret_stdin:
         return _read_text_from_stdin()
     # Interactive fallback
     return getpass.getpass("Secret: ")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222911002023Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222911876799Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.88s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -74,7 +74,7 @@
 
 
 def _resolve_key(args: argparse.Namespace) -> str:
-    if args.key is not None:
+    if not args.key is not None:
         return args.key
     if args.key_file is not None:
         return _read_text_from_file(args.key_file).strip("\n\r")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -76,7 +76,7 @@
 def _resolve_key(args: argparse.Namespace) -> str:
     if args.key is not None:
         return args.key
-    if args.key_file is not None:
+    if not args.key_file is not None:
         return _read_text_from_file(args.key_file).strip("\n\r")
     if args.key_stdin:
         return _read_text_from_stdin().strip("\n\r")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 6

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -78,7 +78,7 @@
         return args.key
     if args.key_file is not None:
         return _read_text_from_file(args.key_file).strip("\n\r")
-    if args.key_stdin:
+    if not args.key_stdin:
         return _read_text_from_stdin().strip("\n\r")
     if args.key_prompt:
         return getpass.getpass("Key: ")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 7

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -80,7 +80,7 @@
         return _read_text_from_file(args.key_file).strip("\n\r")
     if args.key_stdin:
         return _read_text_from_stdin().strip("\n\r")
-    if args.key_prompt:
+    if not args.key_prompt:
         return getpass.getpass("Key: ")
     # If nothing provided, still prompt (safer default)
     return getpass.getpass("Key: ")

...F.........F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eccca22db9a747bdc: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 22.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 8

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -99,7 +99,7 @@
 
 def cmd_explore(args: argparse.Namespace) -> int:
     tree = explore_pdf(args.input)
-    if args.out:
+    if not args.out:
         with open(args.out, "w", encoding="utf-8") as fh:
             json.dump(tree, fh, indent=2, ensure_ascii=False)
     else:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231019282619Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231020170048Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 9

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -111,7 +111,7 @@
 def cmd_embed(args: argparse.Namespace) -> int:
     key = _resolve_key(args)
     secret = _resolve_secret(args)
-    if not is_watermarking_applicable(
+    if not not is_watermarking_applicable(
         method=args.method, pdf=args.input, position=args.position
     ):
         print(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 10

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -137,7 +137,7 @@
 def cmd_extract(args: argparse.Namespace) -> int:
     key = _resolve_key(args)
     secret = read_watermark(method=args.method, pdf=args.input, key=key)
-    if args.out:
+    if not args.out:
         with open(args.out, "w", encoding="utf-8") as fh:
             fh.write(secret)
         print(f"Wrote secret -> {args.out}")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 11

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -228,7 +228,7 @@
 
 def main(argv: Iterable[str] | None = None) -> int:
     parser = build_parser()
-    args = parser.parse_args(list(argv) if argv is not None else None)
+    args = parser.parse_args(list(argv) if not argv is not None else None)
 
     try:
         return int(args.func(args))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 12

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -249,6 +249,6 @@
         return 5
 
 
-if __name__ == "__main__":
+if not __name__ == "__main__":
     raise SystemExit(main())

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -157,7 +157,7 @@
     )
     p.add_argument("--version", action="version", version=f"pdfwm {__version__}")
 
-    sub = p.add_subparsers(dest="cmd", required=True)
+    sub = p.add_subparsers(dest="cmd", required=False)
 
     # methods
     p_methods = sub.add_parser("methods", help="List available watermarking methods")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -101,7 +101,7 @@
     tree = explore_pdf(args.input)
     if args.out:
         with open(args.out, "w", encoding="utf-8") as fh:
-            json.dump(tree, fh, indent=2, ensure_ascii=False)
+            json.dump(tree, fh, indent=2, ensure_ascii=True)
     else:
         json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
         print()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.62s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 1

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -103,7 +103,7 @@
         with open(args.out, "w", encoding="utf-8") as fh:
             json.dump(tree, fh, indent=2, ensure_ascii=False)
     else:
-        json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
+        json.dump(tree, sys.stdout, indent=2, ensure_ascii=True)
         print()
     return 0

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -232,7 +232,7 @@
 
     try:
         return int(args.func(args))
-    except FileNotFoundError as e:
+    except CosmicRayTestingException as e:
         print(f"error: {e}", file=sys.stderr)
         return 2
     except ValueError as e:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034650863379Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034651741610Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -235,7 +235,7 @@
     except FileNotFoundError as e:
         print(f"error: {e}", file=sys.stderr)
         return 2
-    except ValueError as e:
+    except CosmicRayTestingException as e:
         print(f"error: {e}", file=sys.stderr)
         return 2
     except SecretNotFoundError as e:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171021023043Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171021876828Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 2

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -238,7 +238,7 @@
     except ValueError as e:
         print(f"error: {e}", file=sys.stderr)
         return 2
-    except SecretNotFoundError as e:
+    except CosmicRayTestingException as e:
         print(f"secret not found: {e}", file=sys.stderr)
         return 3
     except InvalidKeyError as e:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 3

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -241,7 +241,7 @@
     except SecretNotFoundError as e:
         print(f"secret not found: {e}", file=sys.stderr)
         return 3
-    except InvalidKeyError as e:
+    except CosmicRayTestingException as e:
         print(f"invalid key: {e}", file=sys.stderr)
         return 4
     except WatermarkingError as e:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 4

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -244,7 +244,7 @@
     except InvalidKeyError as e:
         print(f"invalid key: {e}", file=sys.stderr)
         return 4
-    except WatermarkingError as e:
+    except CosmicRayTestingException as e:
         print(f"watermarking error: {e}", file=sys.stderr)
         return 5

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -94,7 +94,7 @@
 def cmd_methods(_args: argparse.Namespace) -> int:
     for name in sorted(METHODS):
         print(name)
-    return 0
+    return 1
 
 
 def cmd_explore(args: argparse.Namespace) -> int:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053840391953Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053841236752Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -94,7 +94,7 @@
 def cmd_methods(_args: argparse.Namespace) -> int:
     for name in sorted(METHODS):
         print(name)
-    return 0
+    return -1
 
 
 def cmd_explore(args: argparse.Namespace) -> int:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.86s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -101,7 +101,7 @@
     tree = explore_pdf(args.input)
     if args.out:
         with open(args.out, "w", encoding="utf-8") as fh:
-            json.dump(tree, fh, indent=2, ensure_ascii=False)
+            json.dump(tree, fh, indent= 3, ensure_ascii=False)
     else:
         json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
         print()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -101,7 +101,7 @@
     tree = explore_pdf(args.input)
     if args.out:
         with open(args.out, "w", encoding="utf-8") as fh:
-            json.dump(tree, fh, indent=2, ensure_ascii=False)
+            json.dump(tree, fh, indent= 1, ensure_ascii=False)
     else:
         json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
         print()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -103,7 +103,7 @@
         with open(args.out, "w", encoding="utf-8") as fh:
             json.dump(tree, fh, indent=2, ensure_ascii=False)
     else:
-        json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
+        json.dump(tree, sys.stdout, indent= 3, ensure_ascii=False)
         print()
     return 0

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -103,7 +103,7 @@
         with open(args.out, "w", encoding="utf-8") as fh:
             json.dump(tree, fh, indent=2, ensure_ascii=False)
     else:
-        json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
+        json.dump(tree, sys.stdout, indent= 1, ensure_ascii=False)
         print()
     return 0

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -105,7 +105,7 @@
     else:
         json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
         print()
-    return 0
+    return 1
 
 
 def cmd_embed(args: argparse.Namespace) -> int:

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -105,7 +105,7 @@
     else:
         json.dump(tree, sys.stdout, indent=2, ensure_ascii=False)
         print()
-    return 0
+    return -1
 
 
 def cmd_embed(args: argparse.Namespace) -> int:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -118,7 +118,7 @@
             f"Method {args.method} is not applicable on {args.output} at "
             f"{args.position}."
         )
-        return 5
+        return 6
 
     pdf_bytes = apply_watermark(
         method=args.method,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -118,7 +118,7 @@
             f"Method {args.method} is not applicable on {args.output} at "
             f"{args.position}."
         )
-        return 5
+        return 4
 
     pdf_bytes = apply_watermark(
         method=args.method,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 10

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -131,7 +131,7 @@
     with open(args.output, "wb") as fh:
         fh.write(pdf_bytes)
     print(f"Wrote watermarked PDF -> {args.output}")
-    return 0
+    return 1
 
 
 def cmd_extract(args: argparse.Namespace) -> int:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 11

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -131,7 +131,7 @@
     with open(args.output, "wb") as fh:
         fh.write(pdf_bytes)
     print(f"Wrote watermarked PDF -> {args.output}")
-    return 0
+    return -1
 
 
 def cmd_extract(args: argparse.Namespace) -> int:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190615310646Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190616211378Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 12

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -143,7 +143,7 @@
         print(f"Wrote secret -> {args.out}")
     else:
         print(secret)
-    return 0
+    return 1
 
 
 # --------------------

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee40cb4752147eb07: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 13

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -143,7 +143,7 @@
         print(f"Wrote secret -> {args.out}")
     else:
         print(secret)
-    return 0
+    return -1
 
 
 # --------------------

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 14

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -234,7 +234,7 @@
         return int(args.func(args))
     except FileNotFoundError as e:
         print(f"error: {e}", file=sys.stderr)
-        return 2
+        return 3
     except ValueError as e:
         print(f"error: {e}", file=sys.stderr)
         return 2

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 15

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -234,7 +234,7 @@
         return int(args.func(args))
     except FileNotFoundError as e:
         print(f"error: {e}", file=sys.stderr)
-        return 2
+        return 1
     except ValueError as e:
         print(f"error: {e}", file=sys.stderr)
         return 2

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012803602745Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012804514727Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 16

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -237,7 +237,7 @@
         return 2
     except ValueError as e:
         print(f"error: {e}", file=sys.stderr)
-        return 2
+        return 3
     except SecretNotFoundError as e:
         print(f"secret not found: {e}", file=sys.stderr)
         return 3

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 17

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -237,7 +237,7 @@
         return 2
     except ValueError as e:
         print(f"error: {e}", file=sys.stderr)
-        return 2
+        return 1
     except SecretNotFoundError as e:
         print(f"secret not found: {e}", file=sys.stderr)
         return 3

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 18

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -240,7 +240,7 @@
         return 2
     except SecretNotFoundError as e:
         print(f"secret not found: {e}", file=sys.stderr)
-        return 3
+        return 4
     except InvalidKeyError as e:
         print(f"invalid key: {e}", file=sys.stderr)
         return 4

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:831: in write

    self._check(file)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:699: in _check

    self.rollover()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:711: in rollover

    newfile.write(file.getvalue())

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'%PDF-1.4\n000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 19

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -240,7 +240,7 @@
         return 2
     except SecretNotFoundError as e:
         print(f"secret not found: {e}", file=sys.stderr)
-        return 3
+        return 2
     except InvalidKeyError as e:
         print(f"invalid key: {e}", file=sys.stderr)
         return 4

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 20

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -243,7 +243,7 @@
         return 3
     except InvalidKeyError as e:
         print(f"invalid key: {e}", file=sys.stderr)
-        return 4
+        return 5
     except WatermarkingError as e:
         print(f"watermarking error: {e}", file=sys.stderr)
         return 5

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e455c83066fde8c3e: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 21

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -243,7 +243,7 @@
         return 3
     except InvalidKeyError as e:
         print(f"invalid key: {e}", file=sys.stderr)
-        return 4
+        return 3
     except WatermarkingError as e:
         print(f"watermarking error: {e}", file=sys.stderr)
         return 5

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 22

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -246,7 +246,7 @@
         return 4
     except WatermarkingError as e:
         print(f"watermarking error: {e}", file=sys.stderr)
-        return 5
+        return 6
 
 
 if __name__ == "__main__":

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050813628741Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050814608518Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.64s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 23

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -246,7 +246,7 @@
         return 4
     except WatermarkingError as e:
         print(f"watermarking error: {e}", file=sys.stderr)
-        return 5
+        return 4
 
 
 if __name__ == "__main__":

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 0

--- mutation diff ---
--- awatermarking_cli.py
+++ bwatermarking_cli.py
@@ -92,7 +92,7 @@
 
 
 def cmd_methods(_args: argparse.Namespace) -> int:
-    for name in sorted(METHODS):
+    for name in []:
         print(name)
     return 0

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 - 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 * 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 / 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 // 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

...F.........F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:831: in write

    self._check(file)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:699: in _check

    self.rollover()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:711: in rollover

    newfile.write(file.getvalue())

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'%PDF-1.4\n000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e190bbba64e62d682: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 % 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200116853357Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T200117837307Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 ** 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151528613298Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151529465727Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 >> 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 << 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 | 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 & 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 ^ 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ea44c4bc56465765c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height + margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Add, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 + 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height * margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mul, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 * 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180349727522Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180351128557Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 23.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height / margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Div, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 / 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height // margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_FloorDiv, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 // 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051806581502Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051807499538Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height % margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Mod, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 % 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142640129689Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142641045988Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height ** margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_Pow, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 ** 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ecf27e5128d6e01df: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height >> margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_RShift, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 >> 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height << margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001218728743Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001219607992Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_LShift, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 << 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003738963433Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003739880084Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height | margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163926293742Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163927195943Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitOr, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 | 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height & margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010014408423Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010015306439Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitAnd, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 & 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -275,7 +275,7 @@
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
-            tl_point = (margin, page.rect.height - margin)
+            tl_point = (margin, page.rect.height ^ margin)
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Sub_BitXor, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 ^ 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e018044adebf7c5e6: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str + None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.90s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161609540906Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161610481290Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int + None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 + 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5c5256f8077a67bc: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 + 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 + 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes + None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes + bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054108978618Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054110009464Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str - None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161245393139Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161246330728Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045011041039Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045011924361Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int - None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 - 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183428720914Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183429699969Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 - 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 - 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes - None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203536204454Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203537111907Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes - bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172454218254Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172455095337Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str * None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015731512964Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015732510866Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int * None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 * 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 * 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 * 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes * None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e814ab849b161828e: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.53s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes * bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str / None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int / None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153853260149Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153854132184Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 / 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.64s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 / 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 / 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.54s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes / None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes / bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232951883395Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232952739496Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str // None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int // None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224302845791Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224303696224Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 // 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003321136016Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003321997566Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 // 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 // 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes // None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031252956017Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031253874213Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes // bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str % None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int % None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 % 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 % 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e3c6749cb3f68222f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.72s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 % 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes % None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes % bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ** None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee0d3266162b01387: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int ** None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035648550770Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035649385231Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 ** 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 ** 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 ** 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes ** None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes ** bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str >> None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235342708819Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235343645464Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150047117660Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150047959648Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171421565375Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171422506038Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int >> None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 >> 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 >> 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 >> 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes >> None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes >> bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str << None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040915845991Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040916858119Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int << None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143637504123Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143638758610Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 << 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 << 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 << 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes << None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213348248585Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213349073810Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes << bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str & None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e98b2de62855f1c76: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154118254524Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154119119827Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055249693094Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055250545977Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int & None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 & 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 & 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225241669275Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225242585776Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 & 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035400084492Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035401084854Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes & None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes & bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T181942268404Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T181943170557Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -74,7 +74,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ^ None = None,
         position: str | None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054336737971Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054337683345Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -75,7 +75,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -158,7 +158,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
             return False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -230,7 +230,7 @@
     # Internal helpers
     # ---------------------
     def _derive_key(
-        self, password: str, salt: bytes, iter_override: int | None = None
+        self, password: str, salt: bytes, iter_override: int ^ None = None
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 ^ 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 ^ 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 ^ 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -308,7 +308,7 @@
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None
 
-    def _extract_manifest(self, doc: pymupdf.Document) -> bytes | None:
+    def _extract_manifest(self, doc: pymupdf.Document) -> bytes ^ None:
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034120584584Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034121472508Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if isinstance(file_bytes, bytes ^ bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if doc.page_count != 0:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if doc.page_count != 0:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if doc.page_count < 0:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e2e814206813d54d4: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.81s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if doc.page_count < 0:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if doc.page_count <= 0:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if doc.page_count <= 0:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041450487260Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041451731455Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if doc.page_count > 0:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034347037207Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034348023600Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if doc.page_count > 0:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if doc.page_count >= 0:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201433179975Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201434095801Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if doc.page_count >= 0:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if actual == expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if actual < expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if actual <= expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if actual > expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if actual >= expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if actual is expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if actual is not expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Lt_Eq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if len(b.strip()) == 8:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_NotEq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if len(b.strip()) != 8:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_LtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if len(b.strip()) <= 8:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Lt_Gt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if len(b.strip()) > 8:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e214f95b1b04e6c65: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Lt_GtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if len(b.strip()) >= 8:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054525430175Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054526404579Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Eq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count == 0 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050303056045Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050303944199Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_NotEq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count != 0 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e6c5385fb06ee253a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_LtE_Lt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count < 0 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_Gt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count > 0 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_LtE_GtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count >= 0 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 or iter_count == 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 or iter_count != 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010949560547Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010950526058Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 or iter_count < 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7beca369256b3483: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 or iter_count <= 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232931655316Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232932643628Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 or iter_count >= 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054940591987Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054941610348Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Eq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if len(out) == self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T230556632047Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T230557495227Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_NotEq, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if len(out) != self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Lt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if len(out) < self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_LtE, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if len(out) <= self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.88s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Gt, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if len(out) > self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Is, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if len(out) is self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_IsNot, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if len(out) is not self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -184,7 +184,7 @@
         doc = pymupdf.open(stream=data, filetype="pdf")
         try:
             manifest_bytes = self._extract_manifest(doc)
-            if manifest_bytes is None:
+            if manifest_bytes is not None:
                 raise SecretNotFoundError("Signed annotation watermark not found")
 
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -77,7 +77,7 @@
         intended_for: str | None = None,
         position: str | None = None,
     ) -> bytes:
-        if not HAS_PYMUPDF:
+        if  HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -79,7 +79,7 @@
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not secret or not isinstance(secret, str):
+        if  secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
         if not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -79,7 +79,7 @@
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not secret or not isinstance(secret, str):
+        if not secret or  isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
         if not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -81,7 +81,7 @@
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
-        if not key or not isinstance(key, str):
+        if  key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         original = load_pdf_bytes(pdf)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 23.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -81,7 +81,7 @@
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
-        if not key or not isinstance(key, str):
+        if not key or  isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         original = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         position: str | None = None,
     ) -> bool:
-        if not HAS_PYMUPDF:
+        if  HAS_PYMUPDF:
             return False
         try:
             b = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -175,7 +175,7 @@
         return True
 
     def read_secret(self, pdf: PdfSource, key: str) -> str:
-        if not HAS_PYMUPDF:
+        if  HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053352333290Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053353164217Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -177,7 +177,7 @@
     def read_secret(self, pdf: PdfSource, key: str) -> str:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not key or not isinstance(key, str):
+        if  key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         data = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -177,7 +177,7 @@
     def read_secret(self, pdf: PdfSource, key: str) -> str:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not key or not isinstance(key, str):
+        if not key or  isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         data = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 9

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -216,7 +216,7 @@
                 raise SecretNotFoundError("Corrupted decrypted payload") from exc
 
             # Validate structure
-            if not (isinstance(payload, dict) and payload.get("secret")):
+            if  (isinstance(payload, dict) and payload.get("secret")):
                 raise SecretNotFoundError("Decrypted payload missing secret field")
 
             # Tamper check: recompute each hashed object

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -77,7 +77,7 @@
         intended_for: str | None = None,
         position: str | None = None,
     ) -> bytes:
-        if not HAS_PYMUPDF:
+        if not not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170741762950Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170742617586Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -79,7 +79,7 @@
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not secret or not isinstance(secret, str):
+        if not not secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
         if not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")

...F.....FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

4 failed, 10 passed, 22 warnings in 22.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -81,7 +81,7 @@
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
-        if not key or not isinstance(key, str):
+        if not not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         original = load_pdf_bytes(pdf)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if not doc.page_count == 0:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -129,7 +129,7 @@
             }
             manifest_bytes = json.dumps(manifest, separators=(",", ":")).encode("utf-8")
             try:
-                if (
+                if not (
                     hasattr(doc, "_embfile_names")
                     and self._EMBED_NAME in doc._embfile_names()
                 ):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -137,7 +137,7 @@
             except Exception as exc:
                 logger.debug("Cleanup of existing embedded file failed: %s", exc)
             try:
-                if hasattr(doc, "_embfile_add"):
+                if not hasattr(doc, "_embfile_add"):
                     doc.embfile_add(
                         self._EMBED_NAME,
                         manifest_bytes,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053553808087Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053554796492Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         position: str | None = None,
     ) -> bool:
-        if not HAS_PYMUPDF:
+        if not not HAS_PYMUPDF:
             return False
         try:
             b = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -175,7 +175,7 @@
         return True
 
     def read_secret(self, pdf: PdfSource, key: str) -> str:
-        if not HAS_PYMUPDF:
+        if not not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -177,7 +177,7 @@
     def read_secret(self, pdf: PdfSource, key: str) -> str:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not key or not isinstance(key, str):
+        if not not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         data = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 9

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -184,7 +184,7 @@
         doc = pymupdf.open(stream=data, filetype="pdf")
         try:
             manifest_bytes = self._extract_manifest(doc)
-            if manifest_bytes is None:
+            if not manifest_bytes is None:
                 raise SecretNotFoundError("Signed annotation watermark not found")
 
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 10

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if not iter_count <= 0 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152454336938Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152455184204Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 11

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -216,7 +216,7 @@
                 raise SecretNotFoundError("Corrupted decrypted payload") from exc
 
             # Validate structure
-            if not (isinstance(payload, dict) and payload.get("secret")):
+            if not not (isinstance(payload, dict) and payload.get("secret")):
                 raise SecretNotFoundError("Decrypted payload missing secret field")
 
             # Tamper check: recompute each hashed object

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155745887170Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155746816161Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 12

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -248,7 +248,7 @@
         except Exception:
             return out
         for xref in range(1, xref_len):
-            if len(out) >= self._OBJ_SAMPLE_LIMIT:
+            if not len(out) >= self._OBJ_SAMPLE_LIMIT:
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172249183133Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172250135417Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 13

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -258,7 +258,7 @@
                 )
                 continue
             lower = obj_str.lower()
-            if "/type /catalog" in lower or "/names" in lower:
+            if not "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
             if len(b.strip()) < 8:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054212791597Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T054213736642Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 14

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if not len(b.strip()) < 8:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 15

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if not doc.page_count == 0:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 16

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -285,7 +285,7 @@
                 logger.debug("Setting annotation flags failed: %s", exc)
             try:
                 # Ensure it is not auto-open
-                if hasattr(annot, "set_open"):
+                if not hasattr(annot, "set_open"):
                     annot.set_open(False)
             except Exception as exc:
                 logger.debug("Setting annotation open state failed: %s", exc)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141603599388Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T141604499296Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 17

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -312,7 +312,7 @@
         # Primary: embedded file
         logger = logging.getLogger(__name__)
         try:
-            if hasattr(doc, "_embfile_names"):
+            if not hasattr(doc, "_embfile_names"):
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 18

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -314,7 +314,7 @@
         try:
             if hasattr(doc, "_embfile_names"):
                 names = doc.embfile_names()
-                if self._EMBED_NAME in names:
+                if not self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
                     if isinstance(file_bytes, bytes | bytearray):
                         return bytes(file_bytes)

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1800777982f26693: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 19

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -316,7 +316,7 @@
                 names = doc.embfile_names()
                 if self._EMBED_NAME in names:
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
-                    if isinstance(file_bytes, bytes | bytearray):
+                    if not isinstance(file_bytes, bytes | bytearray):
                         return bytes(file_bytes)
         except Exception as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 20

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -336,7 +336,7 @@
                     "Referenced object missing (tampered)"
                 ) from None
             lower = obj_str.lower()
-            if "/type /catalog" in lower or "/names" in lower:
+            if not "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 21

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -340,7 +340,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
-            if actual != expected:
+            if not actual != expected:
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -36,7 +36,7 @@
 try:  # PyMuPDF is required for all operations of this method
     import pymupdf
 
-    HAS_PYMUPDF = True
+    HAS_PYMUPDF = False
 except Exception:
     HAS_PYMUPDF = False

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022718652206Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022719591310Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -172,7 +172,7 @@
                 doc.close()
             except Exception as exc:
                 logging.getLogger(__name__).debug("Closing document failed: %s", exc)
-        return True
+        return False
 
     def read_secret(self, pdf: PdfSource, key: str) -> str:
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -38,7 +38,7 @@
 
     HAS_PYMUPDF = True
 except Exception:
-    HAS_PYMUPDF = False
+    HAS_PYMUPDF = True
 
 
 @dataclass

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -161,7 +161,7 @@
         position: str | None = None,
     ) -> bool:
         if not HAS_PYMUPDF:
-            return False
+            return True
         try:
             b = load_pdf_bytes(pdf)
             doc = pymupdf.open(stream=b, filetype="pdf")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -166,7 +166,7 @@
             b = load_pdf_bytes(pdf)
             doc = pymupdf.open(stream=b, filetype="pdf")
         except Exception:
-            return False
+            return True
         finally:
             try:
                 doc.close()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -251,7 +251,7 @@
             if len(out) >= self._OBJ_SAMPLE_LIMIT:
                 break
             try:
-                obj_str = doc.xref_object(xref, compressed=False) or ""
+                obj_str = doc.xref_object(xref, compressed=True) or ""
             except Exception as exc:
                 logging.getLogger(__name__).debug(
                     "Reading xref %s failed: %s", xref, exc

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -286,7 +286,7 @@
             try:
                 # Ensure it is not auto-open
                 if hasattr(annot, "set_open"):
-                    annot.set_open(False)
+                    annot.set_open(True)
             except Exception as exc:
                 logger.debug("Setting annotation open state failed: %s", exc)
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.83s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -330,7 +330,7 @@
             except Exception:
                 raise WatermarkingError("Malformed object hash entry") from None
             try:
-                obj_str = doc.xref_object(xref, compressed=False) or ""
+                obj_str = doc.xref_object(xref, compressed=True) or ""
             except Exception:
                 raise WatermarkingError(
                     "Referenced object missing (tampered)"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceAndWithOr, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -131,7 +131,7 @@
             try:
                 if (
                     hasattr(doc, "_embfile_names")
-                    and self._EMBED_NAME in doc._embfile_names()
+                    or self._EMBED_NAME in doc._embfile_names()
                 ):
                     doc._embfile_del(self._EMBED_NAME)
             except Exception as exc:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180516839421Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180517772644Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceAndWithOr, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -216,7 +216,7 @@
                 raise SecretNotFoundError("Corrupted decrypted payload") from exc
 
             # Validate structure
-            if not (isinstance(payload, dict) and payload.get("secret")):
+            if not (isinstance(payload, dict) or payload.get("secret")):
                 raise SecretNotFoundError("Decrypted payload missing secret field")
 
             # Tamper check: recompute each hashed object

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T162230823028Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T162231711074Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -79,7 +79,7 @@
     ) -> bytes:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not secret or not isinstance(secret, str):
+        if not secret and not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
         if not key or not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -81,7 +81,7 @@
             raise WatermarkingError("PyMuPDF is required for this watermark method")
         if not secret or not isinstance(secret, str):
             raise ValueError("Secret must be a non-empty string")
-        if not key or not isinstance(key, str):
+        if not key and not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         original = load_pdf_bytes(pdf)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -177,7 +177,7 @@
     def read_secret(self, pdf: PdfSource, key: str) -> str:
         if not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for this watermark method")
-        if not key or not isinstance(key, str):
+        if not key and not isinstance(key, str):
             raise ValueError("Key must be a non-empty string")
 
         data = load_pdf_bytes(pdf)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034243283108Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034244219161Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 and iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.89s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -236,7 +236,7 @@
             algorithm=hashes.SHA256(),
             length=32,
             salt=salt,
-            iterations=iter_override or self._PBKDF2_ITER,
+            iterations=iter_override and self._PBKDF2_ITER,
         )
         return kdf.derive(password.encode("utf-8"))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -251,7 +251,7 @@
             if len(out) >= self._OBJ_SAMPLE_LIMIT:
                 break
             try:
-                obj_str = doc.xref_object(xref, compressed=False) or ""
+                obj_str = doc.xref_object(xref, compressed=False) and ""
             except Exception as exc:
                 logging.getLogger(__name__).debug(
                     "Reading xref %s failed: %s", xref, exc

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -258,7 +258,7 @@
                 )
                 continue
             lower = obj_str.lower()
-            if "/type /catalog" in lower or "/names" in lower:
+            if "/type /catalog" in lower and "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
             if len(b.strip()) < 8:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -330,7 +330,7 @@
             except Exception:
                 raise WatermarkingError("Malformed object hash entry") from None
             try:
-                obj_str = doc.xref_object(xref, compressed=False) or ""
+                obj_str = doc.xref_object(xref, compressed=False) and ""
             except Exception:
                 raise WatermarkingError(
                     "Referenced object missing (tampered)"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -336,7 +336,7 @@
                     "Referenced object missing (tampered)"
                 ) from None
             lower = obj_str.lower()
-            if "/type /catalog" in lower or "/names" in lower:
+            if "/type /catalog" in lower and "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBreakWithContinue, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -249,7 +249,7 @@
             return out
         for xref in range(1, xref_len):
             if len(out) >= self._OBJ_SAMPLE_LIMIT:
-                break
+                continue
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""
             except Exception as exc:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceContinueWithBreak, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -256,7 +256,7 @@
                 logging.getLogger(__name__).debug(
                     "Reading xref %s failed: %s", xref, exc
                 )
-                continue
+                break
             lower = obj_str.lower()
             if "/type /catalog" in lower or "/names" in lower:
                 continue

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceContinueWithBreak, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -259,7 +259,7 @@
                 continue
             lower = obj_str.lower()
             if "/type /catalog" in lower or "/names" in lower:
-                continue
+                break
             b = obj_str.encode("latin-1", "replace")
             if len(b.strip()) < 8:
                 continue

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceContinueWithBreak, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -262,7 +262,7 @@
                 continue
             b = obj_str.encode("latin-1", "replace")
             if len(b.strip()) < 8:
-                continue
+                break
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))
         return out

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184905262039Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184906343042Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceContinueWithBreak, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -337,7 +337,7 @@
                 ) from None
             lower = obj_str.lower()
             if "/type /catalog" in lower or "/names" in lower:
-                continue
+                break
             b = obj_str.encode("latin-1", "replace")
             actual = self._sha256(b)
             if actual != expected:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -37,7 +37,7 @@
     import pymupdf
 
     HAS_PYMUPDF = True
-except Exception:
+except CosmicRayTestingException:
     HAS_PYMUPDF = False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -91,7 +91,7 @@
             doc.close()
             original = load_pdf_bytes(new_doc)
             doc = pymupdf.open(stream=original, filetype="pdf")
-        except Exception as exc:  # fallback: create new doc and append original as raw?
+        except CosmicRayTestingException as exc:  # fallback: create new doc and append original as raw?
             raise WatermarkingError(f"Failed to open PDF: {exc}") from exc
         logger = logging.getLogger(__name__)
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -134,7 +134,7 @@
                     and self._EMBED_NAME in doc._embfile_names()
                 ):
                     doc._embfile_del(self._EMBED_NAME)
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logger.debug("Cleanup of existing embedded file failed: %s", exc)
             try:
                 if hasattr(doc, "_embfile_add"):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -144,7 +144,7 @@
                         filename=self._EMBED_NAME,
                         desc="Tatou signed watermark manifest v1",
                     )
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 raise WatermarkingError(
                     f"Failed to attach watermark embedded file: {exc}"
                 ) from exc

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031621054759Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031621942058Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -152,7 +152,7 @@
         finally:
             try:
                 doc.close()
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logging.getLogger(__name__).debug("Closing document failed: %s", exc)
 
     def is_watermark_applicable(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -165,7 +165,7 @@
         try:
             b = load_pdf_bytes(pdf)
             doc = pymupdf.open(stream=b, filetype="pdf")
-        except Exception:
+        except CosmicRayTestingException:
             return False
         finally:
             try:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011416225713Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011417171367Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -170,7 +170,7 @@
         finally:
             try:
                 doc.close()
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logging.getLogger(__name__).debug("Closing document failed: %s", exc)
         return True

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T221617370295Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T221618259553Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -189,7 +189,7 @@
 
             try:
                 manifest = json.loads(manifest_bytes.decode("utf-8"))
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 raise SecretNotFoundError("Malformed watermark manifest") from exc
 
             salt = base64.b64decode(manifest["salt"])

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -205,7 +205,7 @@
             aes = AESGCM(key_bytes)
             try:
                 pt = aes.decrypt(nonce, ct, None)
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 raise InvalidKeyError(
                     "Failed to authenticate watermark (key?)"
                 ) from exc

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e267fd059431e9f6f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 9

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -212,7 +212,7 @@
 
             try:
                 payload = json.loads(pt.decode("utf-8"))
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 raise SecretNotFoundError("Corrupted decrypted payload") from exc
 
             # Validate structure

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec19d59134ae98a29: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 10

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -245,7 +245,7 @@
         out: list[_ObjectHash] = []
         try:
             xref_len = doc.xref_length()
-        except Exception:
+        except CosmicRayTestingException:
             return out
         for xref in range(1, xref_len):
             if len(out) >= self._OBJ_SAMPLE_LIMIT:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211035906904Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211036968791Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 11

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -252,7 +252,7 @@
                 break
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logging.getLogger(__name__).debug(
                     "Reading xref %s failed: %s", xref, exc
                 )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.70s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 12

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -281,7 +281,7 @@
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
                 flags = 1 | 2 | 32 | 64
                 annot.set_flags(flags)
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)
             try:
                 # Ensure it is not auto-open

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 13

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -287,7 +287,7 @@
                 # Ensure it is not auto-open
                 if hasattr(annot, "set_open"):
                     annot.set_open(False)
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logger.debug("Setting annotation open state failed: %s", exc)
             try:
                 annot.set_opacity(0)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 14

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -291,7 +291,7 @@
                 logger.debug("Setting annotation open state failed: %s", exc)
             try:
                 annot.set_opacity(0)
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logger.debug("Setting annotation opacity failed: %s", exc)
             try:
                 # Shrink rectangle to a tiny box

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 15

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -298,7 +298,7 @@
                 r = annot.rect
                 tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)
             try:
                 annot.update()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 16

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -302,7 +302,7 @@
                 logger.debug("Shrinking annotation rect failed: %s", exc)
             try:
                 annot.update()
-            except Exception as exc:
+            except CosmicRayTestingException as exc:
                 logger.debug("Annotation update failed: %s", exc)
         except Exception as exc:
             logger.debug("Adding invisible annotation failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013326544083Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013327498700Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 17

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -304,7 +304,7 @@
                 annot.update()
             except Exception as exc:
                 logger.debug("Annotation update failed: %s", exc)
-        except Exception as exc:
+        except CosmicRayTestingException as exc:
             logger.debug("Adding invisible annotation failed: %s", exc)
         return None

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055427489655Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055428346059Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 18

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -318,7 +318,7 @@
                     file_bytes = doc.embfile_get(self._EMBED_NAME)
                     if isinstance(file_bytes, bytes | bytearray):
                         return bytes(file_bytes)
-        except Exception as exc:
+        except CosmicRayTestingException as exc:
             logger.debug("Failed to extract embedded manifest: %s", exc)
         return None

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033603474219Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033604472136Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 19

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -327,7 +327,7 @@
             try:
                 xref = int(e.get("xref"))
                 expected = str(e.get("sha256"))
-            except Exception:
+            except CosmicRayTestingException:
                 raise WatermarkingError("Malformed object hash entry") from None
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 20

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -331,7 +331,7 @@
                 raise WatermarkingError("Malformed object hash entry") from None
             try:
                 obj_str = doc.xref_object(xref, compressed=False) or ""
-            except Exception:
+            except CosmicRayTestingException:
                 raise WatermarkingError(
                     "Referenced object missing (tampered)"
                 ) from None

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171441631592Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T171442506644Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.26s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -54,7 +54,7 @@
 
     # Constants
     _EMBED_NAME: Final[str] = "WM-TATOU-SIGNED-v1.json"
-    _VERSION: Final[int] = 1
+    _VERSION: Final[int] = 2
     _PBKDF2_ITER: Final[int] = 120_000
     _SALT_LEN: Final[int] = 16
     _OBJ_SAMPLE_LIMIT: Final[int] = 12

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -54,7 +54,7 @@
 
     # Constants
     _EMBED_NAME: Final[str] = "WM-TATOU-SIGNED-v1.json"
-    _VERSION: Final[int] = 1
+    _VERSION: Final[int] = 0
     _PBKDF2_ITER: Final[int] = 120_000
     _SALT_LEN: Final[int] = 16
     _OBJ_SAMPLE_LIMIT: Final[int] = 12

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -55,7 +55,7 @@
     # Constants
     _EMBED_NAME: Final[str] = "WM-TATOU-SIGNED-v1.json"
     _VERSION: Final[int] = 1
-    _PBKDF2_ITER: Final[int] = 120_000
+    _PBKDF2_ITER: Final[int] = 120001
     _SALT_LEN: Final[int] = 16
     _OBJ_SAMPLE_LIMIT: Final[int] = 12

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -55,7 +55,7 @@
     # Constants
     _EMBED_NAME: Final[str] = "WM-TATOU-SIGNED-v1.json"
     _VERSION: Final[int] = 1
-    _PBKDF2_ITER: Final[int] = 120_000
+    _PBKDF2_ITER: Final[int] = 119999
     _SALT_LEN: Final[int] = 16
     _OBJ_SAMPLE_LIMIT: Final[int] = 12

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -56,7 +56,7 @@
     _EMBED_NAME: Final[str] = "WM-TATOU-SIGNED-v1.json"
     _VERSION: Final[int] = 1
     _PBKDF2_ITER: Final[int] = 120_000
-    _SALT_LEN: Final[int] = 16
+    _SALT_LEN: Final[int] = 17
     _OBJ_SAMPLE_LIMIT: Final[int] = 12
 
     @staticmethod

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -56,7 +56,7 @@
     _EMBED_NAME: Final[str] = "WM-TATOU-SIGNED-v1.json"
     _VERSION: Final[int] = 1
     _PBKDF2_ITER: Final[int] = 120_000
-    _SALT_LEN: Final[int] = 16
+    _SALT_LEN: Final[int] = 15
     _OBJ_SAMPLE_LIMIT: Final[int] = 12
 
     @staticmethod

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T162854440262Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T162855301698Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -57,7 +57,7 @@
     _VERSION: Final[int] = 1
     _PBKDF2_ITER: Final[int] = 120_000
     _SALT_LEN: Final[int] = 16
-    _OBJ_SAMPLE_LIMIT: Final[int] = 12
+    _OBJ_SAMPLE_LIMIT: Final[int] = 13
 
     @staticmethod
     def get_usage() -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -57,7 +57,7 @@
     _VERSION: Final[int] = 1
     _PBKDF2_ITER: Final[int] = 120_000
     _SALT_LEN: Final[int] = 16
-    _OBJ_SAMPLE_LIMIT: Final[int] = 12
+    _OBJ_SAMPLE_LIMIT: Final[int] = 11
 
     @staticmethod
     def get_usage() -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if doc.page_count == 1:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -96,7 +96,7 @@
         logger = logging.getLogger(__name__)
         try:
             # Some minimal test PDFs may have no page tree; enforce at least one page.
-            if doc.page_count == 0:
+            if doc.page_count == -1:
                 # Create a brand new document with a blank page instead
                 logger.debug("Rebuilding minimal PDF to include a page")
                 doc.close()

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 10

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -103,7 +103,7 @@
                 doc = pymupdf.open()
                 doc.new_page()
             watermark_id = str(uuid.uuid4())
-            id_hint = watermark_id[:8]
+            id_hint = watermark_id[: 9]
             self._add_invisible_annotation(doc, f"WM:{id_hint}")
             obj_hashes = self._select_and_hash_objects(doc)
             salt = secrets.token_bytes(self._SALT_LEN)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180621264388Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180622223206Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 11

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -103,7 +103,7 @@
                 doc = pymupdf.open()
                 doc.new_page()
             watermark_id = str(uuid.uuid4())
-            id_hint = watermark_id[:8]
+            id_hint = watermark_id[: 7]
             self._add_invisible_annotation(doc, f"WM:{id_hint}")
             obj_hashes = self._select_and_hash_objects(doc)
             salt = secrets.token_bytes(self._SALT_LEN)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042418720791Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042419670647Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 12

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -107,7 +107,7 @@
             self._add_invisible_annotation(doc, f"WM:{id_hint}")
             obj_hashes = self._select_and_hash_objects(doc)
             salt = secrets.token_bytes(self._SALT_LEN)
-            nonce = secrets.token_bytes(12)
+            nonce = secrets.token_bytes( 13)
             derived_key = self._derive_key(key, salt)
             plaintext = {
                 "v": self._VERSION,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eccc74c58e2924576: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 13

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -107,7 +107,7 @@
             self._add_invisible_annotation(doc, f"WM:{id_hint}")
             obj_hashes = self._select_and_hash_objects(doc)
             salt = secrets.token_bytes(self._SALT_LEN)
-            nonce = secrets.token_bytes(12)
+            nonce = secrets.token_bytes( 11)
             derived_key = self._derive_key(key, salt)
             plaintext = {
                 "v": self._VERSION,

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170857961432Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170858906082Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 14

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 1 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 15

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= -1 or iter_count > 300_000:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 16

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 or iter_count > 300001:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021507712120Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021508581923Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 17

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -198,7 +198,7 @@
             iter_count = int(manifest.get("iter", self._PBKDF2_ITER))
             # Limit to 300k iterations to prevent DoS attacks
             # triggered by excessive PBKDF2 computation
-            if iter_count <= 0 or iter_count > 300_000:
+            if iter_count <= 0 or iter_count > 299999:
                 raise WatermarkingError("Unreasonable PBKDF2 iteration count")
 
             key_bytes = self._derive_key(key, salt, iter_override=iter_count)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 18

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -234,7 +234,7 @@
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),
-            length=32,
+            length= 33,
             salt=salt,
             iterations=iter_override or self._PBKDF2_ITER,
         )

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 19

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -234,7 +234,7 @@
     ) -> bytes:
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),
-            length=32,
+            length= 31,
             salt=salt,
             iterations=iter_override or self._PBKDF2_ITER,
         )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 20

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -247,7 +247,7 @@
             xref_len = doc.xref_length()
         except Exception:
             return out
-        for xref in range(1, xref_len):
+        for xref in range( 2, xref_len):
             if len(out) >= self._OBJ_SAMPLE_LIMIT:
                 break
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 21

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -247,7 +247,7 @@
             xref_len = doc.xref_length()
         except Exception:
             return out
-        for xref in range(1, xref_len):
+        for xref in range( 0, xref_len):
             if len(out) >= self._OBJ_SAMPLE_LIMIT:
                 break
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 22

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if len(b.strip()) < 9:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 23

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -261,7 +261,7 @@
             if "/type /catalog" in lower or "/names" in lower:
                 continue
             b = obj_str.encode("latin-1", "replace")
-            if len(b.strip()) < 8:
+            if len(b.strip()) < 7:
                 continue
             sha256 = self._sha256(b)
             out.append(_ObjectHash(xref=xref, sha256=sha256))

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 24

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if doc.page_count == 1:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee04917f1154ce0a2: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.76s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 25

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -270,7 +270,7 @@
     def _add_invisible_annotation(self, doc: pymupdf.Document, text: str) -> None:
         logger = logging.getLogger(__name__)
         try:
-            if doc.page_count == 0:
+            if doc.page_count == -1:
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 26

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -272,7 +272,7 @@
         try:
             if doc.page_count == 0:
                 doc.new_page()
-            page = doc.load_page(0)
+            page = doc.load_page( 1)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
             tl_point = (margin, page.rect.height - margin)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 27

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -272,7 +272,7 @@
         try:
             if doc.page_count == 0:
                 doc.new_page()
-            page = doc.load_page(0)
+            page = doc.load_page( -1)
             # Place near top-left (PDF origin is bottom-left)
             margin = 2
             tl_point = (margin, page.rect.height - margin)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 28

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -274,7 +274,7 @@
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
-            margin = 2
+            margin = 3
             tl_point = (margin, page.rect.height - margin)
             annot = page.add_text_annot(tl_point, text)
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 29

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -274,7 +274,7 @@
                 doc.new_page()
             page = doc.load_page(0)
             # Place near top-left (PDF origin is bottom-left)
-            margin = 2
+            margin = 1
             tl_point = (margin, page.rect.height - margin)
             annot = page.add_text_annot(tl_point, text)
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 30

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 2 | 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 31

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 0 | 2 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 32

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 3 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 33

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 1 | 32 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 34

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 33 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 35

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 31 | 64
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7e7d5598ce55a478: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.70s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 36

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 | 65
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 37

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -279,7 +279,7 @@
             annot = page.add_text_annot(tl_point, text)
             try:
                 # Flags: Invisible(1) | Hidden(2) | NoView(32) | ReadOnly(64)
-                flags = 1 | 2 | 32 | 64
+                flags = 1 | 2 | 32 | 63
                 annot.set_flags(flags)
             except Exception as exc:
                 logger.debug("Setting annotation flags failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010602293471Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010603214745Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 38

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -290,7 +290,7 @@
             except Exception as exc:
                 logger.debug("Setting annotation open state failed: %s", exc)
             try:
-                annot.set_opacity(0)
+                annot.set_opacity( 1)
             except Exception as exc:
                 logger.debug("Setting annotation opacity failed: %s", exc)
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 39

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -290,7 +290,7 @@
             except Exception as exc:
                 logger.debug("Setting annotation open state failed: %s", exc)
             try:
-                annot.set_opacity(0)
+                annot.set_opacity( -1)
             except Exception as exc:
                 logger.debug("Setting annotation opacity failed: %s", exc)
             try:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ebdca024f0996c00f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 40

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 3, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 41

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 1, r.x0 + 2, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193938297659Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193939258205Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.71s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 42

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 3, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 43

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -296,7 +296,7 @@
             try:
                 # Shrink rectangle to a tiny box
                 r = annot.rect
-                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 2, r.y1)
+                tiny = pymupdf.Rect(r.x0, r.y1 - 2, r.x0 + 1, r.y1)
                 annot.set_rect(tiny)
             except Exception as exc:
                 logger.debug("Shrinking annotation rect failed: %s", exc)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143303629451Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143304513073Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -39,9 +39,6 @@
     HAS_PYMUPDF = True
 except Exception:
     HAS_PYMUPDF = False
-
-
-@dataclass
 class _ObjectHash:
     xref: int
     sha256: str

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T145012881965Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T145013718826Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -58,8 +58,6 @@
     _PBKDF2_ITER: Final[int] = 120_000
     _SALT_LEN: Final[int] = 16
     _OBJ_SAMPLE_LIMIT: Final[int] = 12
-
-    @staticmethod
     def get_usage() -> str:
         return (
             "TamperÔÇæresistant watermark using encrypted embedded file"

...F....FFFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 2

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -344,8 +344,6 @@
                 raise WatermarkingError(
                     f"PDF appears tampered: object hash mismatch (xref {xref})"
                 )
-
-    @staticmethod
     def _sha256(b: bytes) -> str:
         h = hashes.Hash(hashes.SHA256())
         h.update(b)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 0

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -247,7 +247,7 @@
             xref_len = doc.xref_length()
         except Exception:
             return out
-        for xref in range(1, xref_len):
+        for xref in []:
             if len(out) >= self._OBJ_SAMPLE_LIMIT:
                 break
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ZeroIterationForLoop, occurrence: 1

--- mutation diff ---
--- asigned_annotation_watermark.py
+++ bsigned_annotation_watermark.py
@@ -323,7 +323,7 @@
         return None
 
     def _verify_object_hashes(self, doc: pymupdf.Document, entries: list[Any]) -> None:
-        for e in entries:
+        for e in []:
             try:
                 xref = int(e.get("xref"))
                 expected = str(e.get("sha256"))

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234237275093Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234238228992Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent + "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" + "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

6 failed, 8 passed, 9 warnings in 14.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent + "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033014204188Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033014489748Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent + "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614efb6c39e8c9d5153b: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" + "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef9d32c641e72250d: unsupported operand type(s) for +: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root + "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec203fdab0099321a: unsupported operand type(s) for +: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir + dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ebf7e264109bda1eb: unsupported operand type(s) for +: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent - "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

...F........FF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

3 failed, 11 passed, 9 warnings in 15.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" - "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061720861793Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061721064076Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 14.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent - "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025700848988Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025701221697Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for -: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 13.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent - "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e411055a45433fe21: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" - "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eccf0368cf534b6c1: unsupported operand type(s) for -: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.61s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root - "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151156273064Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151157242860Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e71e968bde6a03a0d: unsupported operand type(s) for -: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir - dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb7d5ae10bbeccc78: unsupported operand type(s) for -: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent * "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" * "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent * "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent * "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143426500523Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143428046650Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e6fefc693765bf503: can't multiply sequence by non-int of type 'WindowsPath'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 24.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" * "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e15873989e843ef2e: can't multiply sequence by non-int of type 'WindowsPath'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root * "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eae7dc742549979f5: can't multiply sequence by non-int of type 'WindowsPath'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir * dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec94782e9ee20507b: can't multiply sequence by non-int of type 'WindowsPath'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent // "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" // "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232731797824Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232732105008Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent // "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

6 failed, 8 passed, 9 warnings in 14.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent // "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e9fcc0e4c5d725253: unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" // "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1c3690bb2d4b1f05: unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root // "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ecea4bb23de7f72b9: unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir // dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8f6a92bc848dc915: unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent % "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020015130415Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020015400657Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" % "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

6 failed, 8 passed, 9 warnings in 14.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent % "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent % "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212946314746Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212947238850Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb76487060e8237df: unsupported operand type(s) for %: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" % "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1e4022b865b7bb27: unsupported operand type(s) for %: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root % "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir % dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

...F.........F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e2c011fb4173378f0: unsupported operand type(s) for %: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 21.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent ** "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" ** "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

6 failed, 8 passed, 9 warnings in 14.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent ** "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035610876569Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035611107823Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 14.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent ** "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045417515250Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045418397904Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed6869d147629d095: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" ** "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eddadc29155bef3b3: unsupported operand type(s) for ** or pow(): 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root ** "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7c9ba830040d8a45: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir ** dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4a4e25a95549d47c: unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent >> "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034710681924Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034710916176Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" >> "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

6 failed, 8 passed, 9 warnings in 14.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent >> "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent >> "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.FFFFF.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193509610859Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193510507025Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614edd6847922cb6b2a7: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

10 failed, 4 passed, 22 warnings in 19.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" >> "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0a8d5d118a2a40ad: unsupported operand type(s) for >>: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root >> "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed1940bf6d0809eea: unsupported operand type(s) for >>: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir >> dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4d3e6a983f69fde8: unsupported operand type(s) for >>: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent << "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155944622602Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155944842893Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.70s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" << "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

...F.....F..FF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

4 failed, 10 passed, 9 warnings in 15.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent << "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201313447313Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201313744984Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for <<: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 14.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent << "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e24003f79c1b04435: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" << "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef57f7ca9083ea6ac: unsupported operand type(s) for <<: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root << "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055310159621Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055311118308Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e70e47f22e389792c: unsupported operand type(s) for <<: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir << dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed7ef90e986cec5dc: unsupported operand type(s) for <<: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent | "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195506234617Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195506563015Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" | "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent | "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

...F........FF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

3 failed, 11 passed, 9 warnings in 15.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent | "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4ec368e19e07fc73: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" | "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e85ebfbce7c444ac3: unsupported operand type(s) for |: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root | "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e608e339b3637da1b: unsupported operand type(s) for |: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir | dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0237b826c9f5b0a8: unsupported operand type(s) for |: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent & "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055647230288Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055647578233Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" & "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000653105923Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000653377541Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent & "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent & "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e029f3b2ac579c88f: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" & "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e3d6cbfd88c5ae02e: unsupported operand type(s) for &: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.85s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root & "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e2023d5a1314a1d4b: unsupported operand type(s) for &: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir & dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e198b215e2e484db1: unsupported operand type(s) for &: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent ^ "public-keys" / "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025715573432Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025715867477Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -45,7 +45,7 @@
     def _initialize_rmap(self) -> SimpleRMAP:
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
-        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
+        public_keys_dir = str(Path(__file__).parent.parent / "public-keys" ^ "pki")
         server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         return SimpleRMAP(

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234413020472Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234413373844Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 13.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -46,7 +46,7 @@
         """Initialize the RMAP instance with proper key paths."""
         # Set up paths for keys
         public_keys_dir = str(Path(__file__).parent.parent / "public-keys" / "pki")
-        server_private_key = str(Path(__file__).parent / "server_priv.asc")
+        server_private_key = str(Path(__file__).parent ^ "server_priv.asc")
 
         return SimpleRMAP(
             self.storage_dir,

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent ^ "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614efc9e263c2a6c0973: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -160,7 +160,7 @@
             # Resolve file path
             storage_root = Path(self.storage_dir).resolve()
             # Always use static/Group_13.pdf for watermarking
-            file_path = Path(__file__).parent / "static" / "Group_13.pdf"
+            file_path = Path(__file__).parent / "static" ^ "Group_13.pdf"
             file_path = file_path.resolve()
 
             if not file_path.exists():

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045806441403Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045807424694Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e98063b3dcb984a95: unsupported operand type(s) for ^: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -270,7 +270,7 @@
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file
-            rmap_dir = storage_root / "rmap_watermarks"
+            rmap_dir = storage_root ^ "rmap_watermarks"
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191005382072Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191006288795Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eef18380299e5b657: unsupported operand type(s) for ^: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -274,7 +274,7 @@
             rmap_dir.mkdir(parents=True, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
-            dest_path = rmap_dir / dest_filename
+            dest_path = rmap_dir ^ dest_filename
 
             # Write watermarked PDF
             with dest_path.open("wb") as f:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025011650303Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025012494176Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e20c3e47c009a2da7: unsupported operand type(s) for ^: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any + None:
         """
         Create a watermarked PDF for the RMAP session.

...F........FF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

3 failed, 11 passed, 9 warnings in 15.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes + bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.FFFFF.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154932277540Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154933131091Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb513cd0cbdfda684: unsupported operand type(s) for +: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

10 failed, 4 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any - None:
         """
         Create a watermarked PDF for the RMAP session.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes - bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051404474736Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051405699137Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8f1f6f8002466b40: unsupported operand type(s) for -: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 23.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any * None:
         """
         Create a watermarked PDF for the RMAP session.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes * bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e323f9778b3becb97: unsupported operand type(s) for *: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any / None:
         """
         Create a watermarked PDF for the RMAP session.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes / bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151251833534Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151252819824Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e933026be1c17a5a9: unsupported operand type(s) for /: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any // None:
         """
         Create a watermarked PDF for the RMAP session.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 17.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes // bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any % None:
         """
         Create a watermarked PDF for the RMAP session.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes % bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e252e0298d0f8a4c1: unsupported operand type(s) for %: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any ** None:
         """
         Create a watermarked PDF for the RMAP session.

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182147932766Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182148141367Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes ** bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1941349003a76b92: unsupported operand type(s) for ** or pow(): 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any >> None:
         """
         Create a watermarked PDF for the RMAP session.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes >> bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.FFFFF.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203223099041Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203224036270Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e36aca29000279da9: unsupported operand type(s) for >>: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

10 failed, 4 passed, 22 warnings in 19.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any << None:
         """
         Create a watermarked PDF for the RMAP session.

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170842927148Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170843276900Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 13.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes << bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ebcf0c660164da1c3: unsupported operand type(s) for <<: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any & None:
         """
         Create a watermarked PDF for the RMAP session.

...F........FF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

3 failed, 11 passed, 9 warnings in 14.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes & bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e84b0da4590f5c5e3: unsupported operand type(s) for &: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -109,7 +109,7 @@
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
-    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
+    def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any ^ None:
         """
         Create a watermarked PDF for the RMAP session.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.93s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes ^ bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7fb9464699fffaba: unsupported operand type(s) for ^: 'type' and 'type'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) != 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None or intended_for != "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) < 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None or intended_for < "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) <= 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None or intended_for <= "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192416274464Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192417141196Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) > 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None or intended_for > "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) >= 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None or intended_for >= "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None or intended_for is "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



rmap_handler.py:290

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\rmap_handler.py:290: SyntaxWarning: "is" with 'str' literal. Did you mean "=="?

    if intended_for is None or intended_for is "Unknown_Group":



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None or intended_for is not "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



rmap_handler.py:290

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\rmap_handler.py:290: SyntaxWarning: "is not" with 'str' literal. Did you mean "!="?

    if intended_for is None or intended_for is not "Unknown_Group":



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 21.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is not None or intended_for == "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -301,7 +301,7 @@
                         ),
                         {"path": str(file_path)},
                     ).first()
-                    if file_record is None:
+                    if file_record is not None:
                         return jsonify({"error": "File record not found"}), 500
                     did = file_record.id

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.90s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -101,7 +101,7 @@
 
                 # Try to create watermarked PDF
                 pdf_result = self._create_watermarked_pdf_for_session(session_secret)
-                if pdf_result is not None:
+                if pdf_result is None:
                     return pdf_result  # Return error response if PDF creation failed
 
             return jsonify(result), 200

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

>       response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:570: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:920: in full_dispatch_request

    return self.finalize_request(rv)

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:939: in finalize_request

    response = self.make_response(rv)

               ^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <Flask 'server'>, rv = None



    def make_response(self, rv: ft.ResponseReturnValue) -> Response:

        """Convert the return value from a view function to an instance of

        :attr:`response_class`.

    

        :param rv: the return value from the view function. The view function

            must return a response. Returning ``None``, or the view ending

            without returning, is not allowed. The following types are allowed

            for ``view_rv``:

    

            ``str``

                A response object is created with the string encoded to UTF-8

                as the body.

    

            ``bytes``

                A response object is created with the bytes as the body.

    

            ``dict``

                A dictionary that will be jsonify'd before being returned.

    

            ``list``

                A list that will be jsonify'd before being returned.

    

            ``generator`` or ``iterator``

                A generator that returns ``str`` or ``bytes`` to be

                streamed as the response.

    

            ``tuple``

                Either ``(body, status, headers)``, ``(body, status)``, or

                ``(body, headers)``, where ``body`` is any of the other types

                allowed here, ``status`` is a string or an integer, and

                ``headers`` is a dictionary or a list of ``(key, value)``

                tuples. If ``body`` is a :attr:`response_class` instance,

                ``status`` overwrites the exiting value and ``headers`` are

                extended.

    

            :attr:`response_class`

                The object is returned unchanged.

    

            other :class:`~werkzeug.wrappers.Response` class

                The object is coerced to :attr:`response_class`.

    

            :func:`callable`

                The function is called as a WSGI application. The result is

                used to create a response object.

    

        .. versionchanged:: 2.2

            A generator will be converted to a streaming response.

            A list will be converted to a JSON response.

    

        .. versionchanged:: 1.1

            A dict will be converted to a JSON response.

    

        .. versionchanged:: 0.9

           Previously a tuple was interpreted as the arguments for the

           response object.

        """

    

        status: int | None = None

        headers: HeadersValue | None = None

    

        # unpack tuple returns

        if isinstance(rv, tuple):

            len_rv = len(rv)

    

            # a 3-tuple is unpacked directly

            if len_rv == 3:

                rv, status, headers = rv  # type: ignore[misc]

            # decide if a 2-tuple has status or headers

            elif len_rv == 2:

                if isinstance(rv[1], (Headers, dict, tuple, list)):

                    rv, headers = rv  # pyright: ignore

                else:

                    rv, status = rv  # type: ignore[assignment,misc]

            # other sized tuples are not allowed

            else:

                raise TypeError(

                    "The view function did not return a valid response tuple."

                    " The tuple must have the form (body, status, headers),"

                    " (body, status), or (body, headers)."

                )

    

        # the body must not be None

        if rv is None:

>           raise TypeError(

                f"The view function for {request.endpoint!r} did not"

                " return a valid response. The function either returned"

                " None or ended without a return statement."

            )

E           TypeError: The view function for 'rmap_get_link' did not return a valid response. The function either returned None or ended without a return statement.



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1212: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - TypeError: The view function...

1 failed, 13 passed, 22 warnings in 20.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -163,7 +163,7 @@
             file_path = Path(__file__).parent / "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
-            if not file_path.exists():
+            if  file_path.exists():
                 self.app.logger.error(f"Source PDF not found: {file_path}")
                 return jsonify({"error": "Source PDF not found"}), 500

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:167 Source PDF not found: C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\static\Group_13.pdf

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -179,7 +179,7 @@
                         {"path": str(file_path)},
                     ).first()
 
-                    if not existing_file:
+                    if  existing_file:
                         # Need to insert a full Documents row following schema:
                         # (name, path, ownerid, sha256, size)
                         # We don't have an authenticated user in RMAP flow, so we

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -188,7 +188,7 @@
                         owner_row = conn.execute(
                             text("SELECT id FROM Users WHERE email = 'service@rmap.su'")
                         ).first()
-                        if not owner_row:
+                        if  owner_row:
                             raise RuntimeError(
                                 "No users exist to own RMAP base document; "
                                 "create a user first"

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -237,7 +237,7 @@
                                     ),
                                     {"path": str(file_path)},
                                 ).first()
-                                if not existing_file:
+                                if  existing_file:
                                     raise race_e
                             except Exception:
                                 raise

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e035d0f19cc6f2c16: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -254,7 +254,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=None
             )
-            if not applicable:
+            if  applicable:
                 return jsonify({"error": "Watermarking not applicable to PDF"}), 500
 
             # Apply watermark

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if  isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -76,7 +76,7 @@
             payload = request.get_json(silent=True) or {}
             result = self.rmap_instance.handle_message1(payload)
 
-            if "error" in result:
+            if not "error" in result:
                 return jsonify(result), 400 if "required" in result["error"] else 503
 
             return jsonify(result), 200

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042757568628Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042758517698Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 503 == 200

10 failed, 4 passed, 22 warnings in 18.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -77,7 +77,7 @@
             result = self.rmap_instance.handle_message1(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 400 if not "required" in result["error"] else 503
 
             return jsonify(result), 200

............F.                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt and inspect response payload

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        assert decrypted["nonceClient"] == test_nonce

        assert isinstance(decrypted["nonceServer"], int)

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-initiate")

>       assert response.status_code == 400

E       assert 503 == 400

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:529: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 503 == 400

1 failed, 13 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -92,7 +92,7 @@
             payload = request.get_json(silent=True) or {}
             result = self.rmap_instance.handle_message2(payload)
 
-            if "error" in result:
+            if not "error" in result:
                 return jsonify(result), 400 if "required" in result["error"] else 503
 
             # If RMAP authentication succeeded, create watermarked PDF

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 503 == 200

1 failed, 13 passed, 22 warnings in 21.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -93,7 +93,7 @@
             result = self.rmap_instance.handle_message2(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 400 if not "required" in result["error"] else 503
 
             # If RMAP authentication succeeded, create watermarked PDF
             if "result" in result:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

    

        assert "result" in json_data

        assert isinstance(json_data["result"], str)

        assert len(json_data["result"]) == 32

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-get-link")

>       assert response.status_code == 400

E       assert 503 == 400

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:581: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 503 == 400

1 failed, 13 passed, 22 warnings in 20.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -96,7 +96,7 @@
                 return jsonify(result), 400 if "required" in result["error"] else 503
 
             # If RMAP authentication succeeded, create watermarked PDF
-            if "result" in result:
+            if not "result" in result:
                 session_secret = result["result"]
 
                 # Try to create watermarked PDF

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -101,7 +101,7 @@
 
                 # Try to create watermarked PDF
                 pdf_result = self._create_watermarked_pdf_for_session(session_secret)
-                if pdf_result is not None:
+                if not pdf_result is not None:
                     return pdf_result  # Return error response if PDF creation failed
 
             return jsonify(result), 200

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

>       response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:570: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:920: in full_dispatch_request

    return self.finalize_request(rv)

           ^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:939: in finalize_request

    response = self.make_response(rv)

               ^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



self = <Flask 'server'>, rv = None



    def make_response(self, rv: ft.ResponseReturnValue) -> Response:

        """Convert the return value from a view function to an instance of

        :attr:`response_class`.

    

        :param rv: the return value from the view function. The view function

            must return a response. Returning ``None``, or the view ending

            without returning, is not allowed. The following types are allowed

            for ``view_rv``:

    

            ``str``

                A response object is created with the string encoded to UTF-8

                as the body.

    

            ``bytes``

                A response object is created with the bytes as the body.

    

            ``dict``

                A dictionary that will be jsonify'd before being returned.

    

            ``list``

                A list that will be jsonify'd before being returned.

    

            ``generator`` or ``iterator``

                A generator that returns ``str`` or ``bytes`` to be

                streamed as the response.

    

            ``tuple``

                Either ``(body, status, headers)``, ``(body, status)``, or

                ``(body, headers)``, where ``body`` is any of the other types

                allowed here, ``status`` is a string or an integer, and

                ``headers`` is a dictionary or a list of ``(key, value)``

                tuples. If ``body`` is a :attr:`response_class` instance,

                ``status`` overwrites the exiting value and ``headers`` are

                extended.

    

            :attr:`response_class`

                The object is returned unchanged.

    

            other :class:`~werkzeug.wrappers.Response` class

                The object is coerced to :attr:`response_class`.

    

            :func:`callable`

                The function is called as a WSGI application. The result is

                used to create a response object.

    

        .. versionchanged:: 2.2

            A generator will be converted to a streaming response.

            A list will be converted to a JSON response.

    

        .. versionchanged:: 1.1

            A dict will be converted to a JSON response.

    

        .. versionchanged:: 0.9

           Previously a tuple was interpreted as the arguments for the

           response object.

        """

    

        status: int | None = None

        headers: HeadersValue | None = None

    

        # unpack tuple returns

        if isinstance(rv, tuple):

            len_rv = len(rv)

    

            # a 3-tuple is unpacked directly

            if len_rv == 3:

                rv, status, headers = rv  # type: ignore[misc]

            # decide if a 2-tuple has status or headers

            elif len_rv == 2:

                if isinstance(rv[1], (Headers, dict, tuple, list)):

                    rv, headers = rv  # pyright: ignore

                else:

                    rv, status = rv  # type: ignore[assignment,misc]

            # other sized tuples are not allowed

            else:

                raise TypeError(

                    "The view function did not return a valid response tuple."

                    " The tuple must have the form (body, status, headers),"

                    " (body, status), or (body, headers)."

                )

    

        # the body must not be None

        if rv is None:

>           raise TypeError(

                f"The view function for {request.endpoint!r} did not"

                " return a valid response. The function either returned"

                " None or ended without a return statement."

            )

E           TypeError: The view function for 'rmap_get_link' did not return a valid response. The function either returned None or ended without a return statement.



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1212: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - TypeError: The view function...

1 failed, 13 passed, 22 warnings in 21.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -132,7 +132,7 @@
                     {"link": session_secret},
                 ).first()
 
-                if existing_version:
+                if not existing_version:
                     # Check if the file actually exists on disk
                     existing_path = Path(existing_version.path)
                     if existing_path.exists():

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 7

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -135,7 +135,7 @@
                 if existing_version:
                     # Check if the file actually exists on disk
                     existing_path = Path(existing_version.path)
-                    if existing_path.exists():
+                    if not existing_path.exists():
                         self.app.logger.info(
                             f"RMAP watermarked PDF already exists: {session_secret}"
                         )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020233538965Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020234416229Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 8

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -163,7 +163,7 @@
             file_path = Path(__file__).parent / "static" / "Group_13.pdf"
             file_path = file_path.resolve()
 
-            if not file_path.exists():
+            if not not file_path.exists():
                 self.app.logger.error(f"Source PDF not found: {file_path}")
                 return jsonify({"error": "Source PDF not found"}), 500

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:167 Source PDF not found: C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\static\Group_13.pdf

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 9

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -179,7 +179,7 @@
                         {"path": str(file_path)},
                     ).first()
 
-                    if not existing_file:
+                    if not not existing_file:
                         # Need to insert a full Documents row following schema:
                         # (name, path, ownerid, sha256, size)
                         # We don't have an authenticated user in RMAP flow, so we

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 10

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -188,7 +188,7 @@
                         owner_row = conn.execute(
                             text("SELECT id FROM Users WHERE email = 'service@rmap.su'")
                         ).first()
-                        if not owner_row:
+                        if not not owner_row:
                             raise RuntimeError(
                                 "No users exist to own RMAP base document; "
                                 "create a user first"

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154347322004Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154348195968Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 11

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -237,7 +237,7 @@
                                     ),
                                     {"path": str(file_path)},
                                 ).first()
-                                if not existing_file:
+                                if not not existing_file:
                                     raise race_e
                             except Exception:
                                 raise

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 12

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -254,7 +254,7 @@
             applicable = WMUtils.is_watermarking_applicable(
                 method=method, pdf=str(file_path), position=None
             )
-            if not applicable:
+            if not not applicable:
                 return jsonify({"error": "Watermarking not applicable to PDF"}), 500
 
             # Apply watermark

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 13

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 14

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if not intended_for is None or intended_for == "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 15

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -301,7 +301,7 @@
                         ),
                         {"path": str(file_path)},
                     ).first()
-                    if file_record is None:
+                    if not file_record is None:
                         return jsonify({"error": "File record not found"}), 500
                     did = file_record.id

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e26a3ca167f85bfa8: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -73,7 +73,7 @@
     def handle_rmap_initiate(self):
         """Handle RMAP message 1 (initiate authentication)."""
         try:
-            payload = request.get_json(silent=True) or {}
+            payload = request.get_json(silent=False) or {}
             result = self.rmap_instance.handle_message1(payload)
 
             if "error" in result:

............F.                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt and inspect response payload

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        assert decrypted["nonceClient"] == test_nonce

        assert isinstance(decrypted["nonceServer"], int)

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-initiate")

>       assert response.status_code == 400

E       assert 503 == 400

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:529: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 503 == 400

1 failed, 13 passed, 22 warnings in 20.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -89,7 +89,7 @@
     def handle_rmap_get_link(self):
         """Handle RMAP message 2 (get session link)."""
         try:
-            payload = request.get_json(silent=True) or {}
+            payload = request.get_json(silent=False) or {}
             result = self.rmap_instance.handle_message2(payload)
 
             if "error" in result:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

    

        assert "result" in json_data

        assert isinstance(json_data["result"], str)

        assert len(json_data["result"]) == 32

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-get-link")

>       assert response.status_code == 400

E       assert 503 == 400

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:581: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 503 == 400

1 failed, 13 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -271,7 +271,7 @@
 
             # Create destination directory and file
             rmap_dir = storage_root / "rmap_watermarks"
-            rmap_dir.mkdir(parents=True, exist_ok=True)
+            rmap_dir.mkdir(parents=False, exist_ok=True)
 
             dest_filename = f"rmap_{session_secret}.pdf"
             dest_path = rmap_dir / dest_filename

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -271,7 +271,7 @@
 
             # Create destination directory and file
             rmap_dir = storage_root / "rmap_watermarks"
-            rmap_dir.mkdir(parents=True, exist_ok=True)
+            rmap_dir.mkdir(parents=True, exist_ok=False)
 
             dest_filename = f"rmap_{session_secret}.pdf"
             dest_path = rmap_dir / dest_filename

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143719347515Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143720274791Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eeeb4bf18e8ee6d65: [WinError 183] Impossibile creare un file, se il file esiste gi├á: 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\rmap_watermarks'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -334,7 +334,7 @@
             except Exception as db_e:
                 # If database insert fails, clean up the file
                 try:
-                    dest_path.unlink(missing_ok=True)
+                    dest_path.unlink(missing_ok=False)
                 except Exception as cleanup_e:
                     self.app.logger.error(
                         f"Failed to cleanup file after DB error: {cleanup_e}"

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e350f85cac569e03a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -73,7 +73,7 @@
     def handle_rmap_initiate(self):
         """Handle RMAP message 1 (initiate authentication)."""
         try:
-            payload = request.get_json(silent=True) or {}
+            payload = request.get_json(silent=True) and {}
             result = self.rmap_instance.handle_message1(payload)
 
             if "error" in result:

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 400 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 400 == 200

2 failed, 12 passed, 22 warnings in 16.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -89,7 +89,7 @@
     def handle_rmap_get_link(self):
         """Handle RMAP message 2 (get session link)."""
         try:
-            payload = request.get_json(silent=True) or {}
+            payload = request.get_json(silent=True) and {}
             result = self.rmap_instance.handle_message2(payload)
 
             if "error" in result:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 400 == 200

1 failed, 13 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) and len(wm_bytes) == 0:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -287,7 +287,7 @@
                     intended_for = self.rmap_instance.get_session_identity(
                         session_secret
                     )
-                    if intended_for is None or intended_for == "Unknown_Group":
+                    if intended_for is None and intended_for == "Unknown_Group":
                         # Use a more descriptive fallback that
                         # indicates RMAP authentication
                         intended_for = "RMAP_CLIENT"

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4c1b58983081cbc0: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -81,7 +81,7 @@
 
             return jsonify(result), 200
 
-        except Exception as e:
+        except CosmicRayTestingException as e:
             return jsonify(
                 {"error": f"RMAP system initialization failed: {str(e)}"}
             ), 503

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165541784760Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165542615619Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -106,7 +106,7 @@
 
             return jsonify(result), 200
 
-        except Exception as e:
+        except CosmicRayTestingException as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
 
     def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234311331358Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234312207157Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -152,7 +152,7 @@
                             f" {session_secret}"
                         )
 
-        except Exception as e:
+        except CosmicRayTestingException as e:
             return jsonify({"error": f"Database error: {str(e)}"}), 500
 
         # Create watermarked PDF

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -198,7 +198,7 @@
                         # Gather file metadata
                         try:
                             pdf_bytes = file_path.read_bytes()
-                        except Exception as fe:
+                        except CosmicRayTestingException as fe:
                             raise RuntimeError(
                                 f"Failed reading source PDF for RMAP insertion: {fe}"
                             ) from fe

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -226,7 +226,7 @@
                                     "size": int(size),
                                 },
                             )
-                        except Exception as race_e:
+                        except CosmicRayTestingException as race_e:
                             # If due to unique path constraint, fetch existing id;
                             # otherwise re-raise
                             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -239,7 +239,7 @@
                                 ).first()
                                 if not existing_file:
                                     raise race_e
-                            except Exception:
+                            except CosmicRayTestingException:
                                 raise
             except Exception as db_e:
                 self.app.logger.error(f"Failed to add source PDF to database: {db_e}")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -241,7 +241,7 @@
                                     raise race_e
                             except Exception:
                                 raise
-            except Exception as db_e:
+            except CosmicRayTestingException as db_e:
                 self.app.logger.error(f"Failed to add source PDF to database: {db_e}")
                 return jsonify({"error": f"Database error: {str(db_e)}"}), 500

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 7

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -331,7 +331,7 @@
                 )
                 return None  # Success
 
-            except Exception as db_e:
+            except CosmicRayTestingException as db_e:
                 # If database insert fails, clean up the file
                 try:
                     dest_path.unlink(missing_ok=True)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 8

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -335,7 +335,7 @@
                 # If database insert fails, clean up the file
                 try:
                     dest_path.unlink(missing_ok=True)
-                except Exception as cleanup_e:
+                except CosmicRayTestingException as cleanup_e:
                     self.app.logger.error(
                         f"Failed to cleanup file after DB error: {cleanup_e}"
                     )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 9

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -348,7 +348,7 @@
                     {"error": f"Database insertion failed: {str(db_e)}"}
                 ), 500
 
-        except Exception as e:
+        except CosmicRayTestingException as e:
             self.app.logger.error(
                 f"Failed to create watermarked PDF for session"
                 f" {session_secret}: {str(e)}"

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060019164842Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060020061514Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -77,7 +77,7 @@
             result = self.rmap_instance.handle_message1(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 401 if "required" in result["error"] else 503
 
             return jsonify(result), 200

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt and inspect response payload

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        assert decrypted["nonceClient"] == test_nonce

        assert isinstance(decrypted["nonceServer"], int)

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-initiate")

>       assert response.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:529: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e6b98cee734f94f1a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 401 == 400

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

6 failed, 8 passed, 22 warnings in 19.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -77,7 +77,7 @@
             result = self.rmap_instance.handle_message1(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 399 if "required" in result["error"] else 503
 
             return jsonify(result), 200

.FFFFF.F.FFFF.                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061138162127Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T061139095548Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt and inspect response payload

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        assert decrypted["nonceClient"] == test_nonce

        assert isinstance(decrypted["nonceServer"], int)

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-initiate")

>       assert response.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:529: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 399 == 400

10 failed, 4 passed, 22 warnings in 20.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -77,7 +77,7 @@
             result = self.rmap_instance.handle_message1(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 400 if "required" in result["error"] else 504
 
             return jsonify(result), 200

............F.                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt and inspect response payload

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        assert decrypted["nonceClient"] == test_nonce

        assert isinstance(decrypted["nonceServer"], int)

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-initiate")

        assert response.status_code == 400

    

        # Wrong format params

        response = client.post("/api/rmap-initiate", json={"payload":"wrongformatstring"})

>       assert response.status_code == 503

E       assert 504 == 503

E        +  where 504 = <WrapperTestResponse streamed [504 GATEWAY TIMEOUT]>.status_code



..\test\test_api.py:533: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 504 == 503

1 failed, 13 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -77,7 +77,7 @@
             result = self.rmap_instance.handle_message1(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 400 if "required" in result["error"] else 502
 
             return jsonify(result), 200

............F.                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt and inspect response payload

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        assert decrypted["nonceClient"] == test_nonce

        assert isinstance(decrypted["nonceServer"], int)

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-initiate")

        assert response.status_code == 400

    

        # Wrong format params

        response = client.post("/api/rmap-initiate", json={"payload":"wrongformatstring"})

>       assert response.status_code == 503

E       assert 502 == 503

E        +  where 502 = <WrapperTestResponse streamed [502 BAD GATEWAY]>.status_code



..\test\test_api.py:533: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 502 == 503

1 failed, 13 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -79,7 +79,7 @@
             if "error" in result:
                 return jsonify(result), 400 if "required" in result["error"] else 503
 
-            return jsonify(result), 200
+            return jsonify(result), 201
 
         except Exception as e:
             return jsonify(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030414885720Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030415828866Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 201 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 201 == 200

12 failed, 2 passed, 22 warnings in 17.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -79,7 +79,7 @@
             if "error" in result:
                 return jsonify(result), 400 if "required" in result["error"] else 503
 
-            return jsonify(result), 200
+            return jsonify(result), 199
 
         except Exception as e:
             return jsonify(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 199 == 200

E        +  where 199 = <WrapperTestResponse streamed [199 UNKNOWN]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 199 == 200

E        +  where 199 = <WrapperTestResponse streamed [199 UNKNOWN]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 199 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 199 == 200

2 failed, 12 passed, 22 warnings in 18.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -84,7 +84,7 @@
         except Exception as e:
             return jsonify(
                 {"error": f"RMAP system initialization failed: {str(e)}"}
-            ), 503
+            ), 504
 
     def handle_rmap_get_link(self):
         """Handle RMAP message 2 (get session link)."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -84,7 +84,7 @@
         except Exception as e:
             return jsonify(
                 {"error": f"RMAP system initialization failed: {str(e)}"}
-            ), 503
+            ), 502
 
     def handle_rmap_get_link(self):
         """Handle RMAP message 2 (get session link)."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -93,7 +93,7 @@
             result = self.rmap_instance.handle_message2(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 401 if "required" in result["error"] else 503
 
             # If RMAP authentication succeeded, create watermarked PDF
             if "result" in result:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

    

        assert "result" in json_data

        assert isinstance(json_data["result"], str)

        assert len(json_data["result"]) == 32

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-get-link")

>       assert response.status_code == 400

E       assert 401 == 400

E        +  where 401 = <WrapperTestResponse streamed [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:581: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 401 == 400

1 failed, 13 passed, 22 warnings in 20.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -93,7 +93,7 @@
             result = self.rmap_instance.handle_message2(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 399 if "required" in result["error"] else 503
 
             # If RMAP authentication succeeded, create watermarked PDF
             if "result" in result:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

    

        assert "result" in json_data

        assert isinstance(json_data["result"], str)

        assert len(json_data["result"]) == 32

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-get-link")

>       assert response.status_code == 400

E       assert 399 == 400

E        +  where 399 = <WrapperTestResponse streamed [399 UNKNOWN]>.status_code



..\test\test_api.py:581: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 399 == 400

1 failed, 13 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 10

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -93,7 +93,7 @@
             result = self.rmap_instance.handle_message2(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 400 if "required" in result["error"] else 504
 
             # If RMAP authentication succeeded, create watermarked PDF
             if "result" in result:

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003941922118Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003942849722Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

    

        assert "result" in json_data

        assert isinstance(json_data["result"], str)

        assert len(json_data["result"]) == 32

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-get-link")

        assert response.status_code == 400

    

        # Wrong format params

        response = client.post("/api/rmap-get-link", json={"payload":"wrongformatstring"})

>       assert response.status_code == 503

E       assert 504 == 503

E        +  where 504 = <WrapperTestResponse streamed [504 GATEWAY TIMEOUT]>.status_code



..\test\test_api.py:585: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 504 == 503

9 failed, 5 passed, 22 warnings in 19.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 11

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -93,7 +93,7 @@
             result = self.rmap_instance.handle_message2(payload)
 
             if "error" in result:
-                return jsonify(result), 400 if "required" in result["error"] else 503
+                return jsonify(result), 400 if "required" in result["error"] else 502
 
             # If RMAP authentication succeeded, create watermarked PDF
             if "result" in result:

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

    

        assert "result" in json_data

        assert isinstance(json_data["result"], str)

        assert len(json_data["result"]) == 32

    

        # Test with wrong parameters

        # Missing params

        response = client.post("/api/rmap-get-link")

        assert response.status_code == 400

    

        # Wrong format params

        response = client.post("/api/rmap-get-link", json={"payload":"wrongformatstring"})

>       assert response.status_code == 503

E       assert 502 == 503

E        +  where 502 = <WrapperTestResponse streamed [502 BAD GATEWAY]>.status_code



..\test\test_api.py:585: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 502 == 503

1 failed, 13 passed, 22 warnings in 20.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 12

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -104,7 +104,7 @@
                 if pdf_result is not None:
                     return pdf_result  # Return error response if PDF creation failed
 
-            return jsonify(result), 200
+            return jsonify(result), 201
 
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 201 == 200

E        +  where 201 = <WrapperTestResponse streamed [201 CREATED]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 201 == 200

1 failed, 13 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 13

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -104,7 +104,7 @@
                 if pdf_result is not None:
                     return pdf_result  # Return error response if PDF creation failed
 
-            return jsonify(result), 200
+            return jsonify(result), 199
 
         except Exception as e:
             return jsonify({"error": f"RMAP system error: {str(e)}"}), 503

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 199 == 200

E        +  where 199 = <WrapperTestResponse streamed [199 UNKNOWN]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 199 == 200

1 failed, 13 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 14

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -107,7 +107,7 @@
             return jsonify(result), 200
 
         except Exception as e:
-            return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
+            return jsonify({"error": f"RMAP system error: {str(e)}"}), 504
 
     def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
         """

...F.....FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

4 failed, 10 passed, 22 warnings in 21.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 15

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -107,7 +107,7 @@
             return jsonify(result), 200
 
         except Exception as e:
-            return jsonify({"error": f"RMAP system error: {str(e)}"}), 503
+            return jsonify({"error": f"RMAP system error: {str(e)}"}), 502
 
     def _create_watermarked_pdf_for_session(self, session_secret: str) -> Any | None:
         """

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175315847987Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175316726120Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 16

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -153,7 +153,7 @@
                         )
 
         except Exception as e:
-            return jsonify({"error": f"Database error: {str(e)}"}), 500
+            return jsonify({"error": f"Database error: {str(e)}"}), 501
 
         # Create watermarked PDF
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 17

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -153,7 +153,7 @@
                         )
 
         except Exception as e:
-            return jsonify({"error": f"Database error: {str(e)}"}), 500
+            return jsonify({"error": f"Database error: {str(e)}"}), 499
 
         # Create watermarked PDF
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 18

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -165,7 +165,7 @@
 
             if not file_path.exists():
                 self.app.logger.error(f"Source PDF not found: {file_path}")
-                return jsonify({"error": "Source PDF not found"}), 500
+                return jsonify({"error": "Source PDF not found"}), 501
 
             # Add file to database if not already present
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 19

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -165,7 +165,7 @@
 
             if not file_path.exists():
                 self.app.logger.error(f"Source PDF not found: {file_path}")
-                return jsonify({"error": "Source PDF not found"}), 500
+                return jsonify({"error": "Source PDF not found"}), 499
 
             # Add file to database if not already present
             try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 20

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -243,7 +243,7 @@
                                 raise
             except Exception as db_e:
                 self.app.logger.error(f"Failed to add source PDF to database: {db_e}")
-                return jsonify({"error": f"Database error: {str(db_e)}"}), 500
+                return jsonify({"error": f"Database error: {str(db_e)}"}), 501
 
             # Use robust-xmp watermarking (best technique)
             method = "robust-xmp"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 21

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -243,7 +243,7 @@
                                 raise
             except Exception as db_e:
                 self.app.logger.error(f"Failed to add source PDF to database: {db_e}")
-                return jsonify({"error": f"Database error: {str(db_e)}"}), 500
+                return jsonify({"error": f"Database error: {str(db_e)}"}), 499
 
             # Use robust-xmp watermarking (best technique)
             method = "robust-xmp"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 22

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -255,7 +255,7 @@
                 method=method, pdf=str(file_path), position=None
             )
             if not applicable:
-                return jsonify({"error": "Watermarking not applicable to PDF"}), 500
+                return jsonify({"error": "Watermarking not applicable to PDF"}), 501
 
             # Apply watermark
             wm_bytes = WMUtils.apply_watermark(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 23

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -255,7 +255,7 @@
                 method=method, pdf=str(file_path), position=None
             )
             if not applicable:
-                return jsonify({"error": "Watermarking not applicable to PDF"}), 500
+                return jsonify({"error": "Watermarking not applicable to PDF"}), 499
 
             # Apply watermark
             wm_bytes = WMUtils.apply_watermark(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 24

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 1:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 25

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -266,7 +266,7 @@
                 position=None,
             )
 
-            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
+            if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == -1:
                 return jsonify({"error": "Watermarking produced no output"}), 500
 
             # Create destination directory and file

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 26

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -267,7 +267,7 @@
             )
 
             if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
-                return jsonify({"error": "Watermarking produced no output"}), 500
+                return jsonify({"error": "Watermarking produced no output"}), 501
 
             # Create destination directory and file
             rmap_dir = storage_root / "rmap_watermarks"

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee77bd2261c15d32a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 27

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -267,7 +267,7 @@
             )
 
             if not isinstance(wm_bytes, bytes | bytearray) or len(wm_bytes) == 0:
-                return jsonify({"error": "Watermarking produced no output"}), 500
+                return jsonify({"error": "Watermarking produced no output"}), 499
 
             # Create destination directory and file
             rmap_dir = storage_root / "rmap_watermarks"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 28

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -302,7 +302,7 @@
                         {"path": str(file_path)},
                     ).first()
                     if file_record is None:
-                        return jsonify({"error": "File record not found"}), 500
+                        return jsonify({"error": "File record not found"}), 501
                     did = file_record.id
 
                     conn.execute(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 29

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -302,7 +302,7 @@
                         {"path": str(file_path)},
                     ).first()
                     if file_record is None:
-                        return jsonify({"error": "File record not found"}), 500
+                        return jsonify({"error": "File record not found"}), 499
                     did = file_record.id
 
                     conn.execute(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 30

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -346,7 +346,7 @@
                 )
                 return jsonify(
                     {"error": f"Database insertion failed: {str(db_e)}"}
-                ), 500
+                ), 501
 
         except Exception as e:
             self.app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 31

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -346,7 +346,7 @@
                 )
                 return jsonify(
                     {"error": f"Database insertion failed: {str(db_e)}"}
-                ), 500
+                ), 499
 
         except Exception as e:
             self.app.logger.error(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.86s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 32

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -355,5 +355,5 @@
             )
             return jsonify(
                 {"error": f"Failed to create watermarked PDF: {str(e)}"}
-            ), 500
-
+            ), 501
+

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 33

--- mutation diff ---
--- armap_handler.py
+++ brmap_handler.py
@@ -355,5 +355,5 @@
             )
             return jsonify(
                 {"error": f"Failed to create watermarked PDF: {str(e)}"}
-            ), 500
-
+            ), 499
+

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 499 == 200

E        +  where 499 = <WrapperTestResponse streamed [499 UNKNOWN]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eb8f729f6d8b38b28: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 499 == 200

5 failed, 9 passed, 22 warnings in 19.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root + "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" + "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T204419593140Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T204421149224Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 22.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent + "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent + "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for +: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Add, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent + "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root - "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" - "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent - "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent - "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

...F.....FFFFF                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Sub, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent - "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root * "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" * "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent * "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent * "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052017934655Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052018164950Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): can't multiply sequence by non-int of type 'WindowsPath'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 14.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mul, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent * "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root // "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035918804178Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T035919715544Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.65s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" // "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent // "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent // "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for //: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_FloorDiv, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent // "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root % "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" % "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent % "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eac99b232e76a61c6: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent % "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212058788194Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212059051307Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for %: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Mod, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent % "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eaff3c5463b09bb4a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root ** "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" ** "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042840321266Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042841330916Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 21.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent ** "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent ** "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ** or pow(): 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_Pow, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent ** "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root >> "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.80s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" >> "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent >> "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent >> "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for >>: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_RShift, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent >> "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8367a1d17a67234f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.71s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root << "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.82s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" << "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent << "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent << "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

...F.....FFFFF                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_LShift, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent << "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161629641512Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161630580974Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root | "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" | "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent | "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent | "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172152142393Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172152368724Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for |: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitOr, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent | "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014744996307Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014745982281Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root & "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" & "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent & "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent & "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for &: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitAnd, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent & "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root ^ "public-keys" / "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -49,7 +49,7 @@
         if public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
-            public_keys_dir = str(server_root / "public-keys" / "pki")
+            public_keys_dir = str(server_root / "public-keys" ^ "pki")
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -53,7 +53,7 @@
 
         if server_private_key is None:
             # Default to server_priv.asc in src directory
-            server_private_key = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key = str(Path(__file__).parent ^ "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
         server_public_key = str(Path(__file__).parent / "server_pub.asc")

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614efed1548f19e1dc37: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 22.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -56,7 +56,7 @@
             server_private_key = str(Path(__file__).parent / "server_priv.asc")
 
         # Server public key path (needed for IdentityManager)
-        server_public_key = str(Path(__file__).parent / "server_pub.asc")
+        server_public_key = str(Path(__file__).parent ^ "server_pub.asc")
 
         # Initialize RMAP components with correct API
         self.identity_manager = IdentityManager(

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

----------------------------- Captured log setup ------------------------------

WARNING  server:server.py:88 RMAP initialization failed (continuing): unsupported operand type(s) for ^: 'WindowsPath' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Div_BitXor, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -107,7 +107,7 @@
 
         try:
             # Load server private key for decryption
-            server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
+            server_private_key_path = str(Path(__file__).parent ^ "server_priv.asc")
             if not Path(server_private_key_path).exists():
                 return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str + None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str + None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] + None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str + None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] + None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

...F........FF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

3 failed, 11 passed, 9 warnings in 15.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str + None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str - None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

6 failed, 8 passed, 9 warnings in 14.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str - None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003340705288Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003341078489Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] - None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str - None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

...F.....FFFFF                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] - None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033504585499Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033504771235Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str - None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str * None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str * None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010115931210Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010116312542Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] * None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str * None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] * None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str * None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 16.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str / None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055412489591Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055412735264Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.86s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str / None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163345299270Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163345612473Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] / None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.85s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str / None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] / None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str / None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str // None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170438903750Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T170439139365Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str // None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] // None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str // None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045341450753Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045341722266Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 14.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] // None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str // None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012945444343Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012945687791Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str % None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str % None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151216048026Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151216258774Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] % None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str % None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] % None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str % None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

...F.....FFFFF                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str ** None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str ** None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033938495592Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033938840019Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] ** None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.19s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str ** None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004943669694Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004943960120Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] ** None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154732374516Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154732712528Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str ** None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155402885324Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155403237776Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str >> None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001806113266Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001806476186Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str >> None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005856293263Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005856627145Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] >> None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014039843649Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T014040115811Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str >> None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182245380730Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182245598045Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.85s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] >> None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str >> None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 16.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str << None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str << None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] << None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str << None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] << None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

.FFF.F.F.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212430602020Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212430948015Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

10 failed, 4 passed, 9 warnings in 14.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str << None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str & None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015456455316Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T015456743765Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str & None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] & None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str & None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 14.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] & None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201258562644Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201258789910Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 13.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str & None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -31,7 +31,7 @@
     def __init__(
         self,
         storage_dir: str,
-        public_keys_dir: str | None = None,
+        public_keys_dir: str ^ None = None,
         server_private_key: str | None = None,
     ):
         self.storage_dir = storage_dir

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -32,7 +32,7 @@
         self,
         storage_dir: str,
         public_keys_dir: str | None = None,
-        server_private_key: str | None = None,
+        server_private_key: str ^ None = None,
     ):
         self.storage_dir = storage_dir
         self.watermarked_pdfs: dict[

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -97,7 +97,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:
+    def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] ^ None:
         """
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -187,7 +187,7 @@
         except Exception as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
-    def _find_identity_for_session(self, session_secret: str) -> str | None:
+    def _find_identity_for_session(self, session_secret: str) -> str ^ None:
         """
         Try to find the identity that corresponds to this session secret.
         This implements correlation between Message 1 and Message 2.

...F.....FFFFF                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

6 failed, 8 passed, 9 warnings in 15.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -204,7 +204,7 @@
         # Default fallback - better than hardcoded "RMAP_CLIENT"
         return "Unknown_Group"
 
-    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] | None:
+    def get_watermarked_pdf_info(self, session_secret: str) -> dict[str, Any] ^ None:
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)

.FFFFFFF.FFFFF                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050718351243Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050718582845Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

12 failed, 2 passed, 9 warnings in 14.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -208,7 +208,7 @@
         """Get watermarked PDF metadata for a session secret."""
         return self.watermarked_pdfs.get(session_secret)
 
-    def get_session_identity(self, session_secret: str) -> str | None:
+    def get_session_identity(self, session_secret: str) -> str ^ None:
         """Get the identity (group name) for a session secret."""
         return self.session_identities.get(session_secret)

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 405 == 200

E        +  where 405 = <WrapperTestResponse streamed [405 METHOD NOT ALLOWED]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



test/test_api.py::test_rmap_initiate

test/test_api.py::test_rmap_get_link

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 405 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 405 == 200

2 failed, 12 passed, 9 warnings in 15.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Lt_Eq, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if len(session_secret) == 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222621577532Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222622444808Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_NotEq, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if len(session_secret) != 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_LtE, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if len(session_secret) <= 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Lt_Gt, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if len(session_secret) > 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Lt_GtE, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if len(session_secret) >= 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020751700460Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020752629868Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -163,7 +163,7 @@
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
-                elif len(session_secret) > 32:
+                elif len(session_secret) == 32:
                     session_secret = session_secret[:32]
 
                 # Try to correlate with pending identity

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -163,7 +163,7 @@
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
-                elif len(session_secret) > 32:
+                elif len(session_secret) != 32:
                     session_secret = session_secret[:32]
 
                 # Try to correlate with pending identity

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -163,7 +163,7 @@
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
-                elif len(session_secret) > 32:
+                elif len(session_secret) < 32:
                     session_secret = session_secret[:32]
 
                 # Try to correlate with pending identity

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -163,7 +163,7 @@
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
-                elif len(session_secret) > 32:
+                elif len(session_secret) <= 32:
                     session_secret = session_secret[:32]
 
                 # Try to correlate with pending identity

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013427965957Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013428886887Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -163,7 +163,7 @@
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
-                elif len(session_secret) > 32:
+                elif len(session_secret) >= 32:
                     session_secret = session_secret[:32]
 
                 # Try to correlate with pending identity

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e514a370a2b400e0f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.72s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -46,7 +46,7 @@
         ] = {}  # Store identity for each nonce_client during handshake
 
         # Set up paths for keys
-        if public_keys_dir is None:
+        if public_keys_dir is not None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
             public_keys_dir = str(server_root / "public-keys" / "pki")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Is_IsNot, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -51,7 +51,7 @@
             server_root = Path(__file__).parent.parent
             public_keys_dir = str(server_root / "public-keys" / "pki")
 
-        if server_private_key is None:
+        if server_private_key is not None:
             # Default to server_priv.asc in src directory
             server_private_key = str(Path(__file__).parent / "server_priv.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_IsNot_Is, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -85,7 +85,7 @@
             if identity_data:
                 nonce_client = identity_data.get("nonceClient")
                 identity = identity_data.get("identity", "Unknown_Group")
-                if nonce_client is not None:
+                if nonce_client is None:
                     # Store identity for later correlation with session secret
                     self.pending_identities[nonce_client] = identity

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -102,7 +102,7 @@
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.
         """
-        if not PGP_AVAILABLE:
+        if  PGP_AVAILABLE:
             return None
 
         try:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -108,7 +108,7 @@
         try:
             # Load server private key for decryption
             server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
-            if not Path(server_private_key_path).exists():
+            if  Path(server_private_key_path).exists():
                 return None
 
             # Load the private key

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -117,7 +117,7 @@
             # Unlock the private key if it's protected
             if server_key.is_protected:
                 passphrase = os.getenv("PRIVKEY_PASSPHRASE", "")
-                if not passphrase:
+                if  passphrase:
                     return None
                 server_key.unlock(passphrase)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155725688698Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155726573807Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -46,7 +46,7 @@
         ] = {}  # Store identity for each nonce_client during handshake
 
         # Set up paths for keys
-        if public_keys_dir is None:
+        if not public_keys_dir is None:
             # Default to public-keys/pki directory relative to server root
             server_root = Path(__file__).parent.parent
             public_keys_dir = str(server_root / "public-keys" / "pki")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -51,7 +51,7 @@
             server_root = Path(__file__).parent.parent
             public_keys_dir = str(server_root / "public-keys" / "pki")
 
-        if server_private_key is None:
+        if not server_private_key is None:
             # Default to server_priv.asc in src directory
             server_private_key = str(Path(__file__).parent / "server_priv.asc")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -77,7 +77,7 @@
         Returns: {"payload": "<base64(encrypted_response)>"} or {"error": "<reason>"}
         """
         try:
-            if "payload" not in incoming:
+            if not "payload" not in incoming:
                 return {"error": "payload is required"}
 
             # Try to extract identity from the payload before processing

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 400 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 400 == 200

2 failed, 12 passed, 22 warnings in 16.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -82,7 +82,7 @@
 
             # Try to extract identity from the payload before processing
             identity_data = self._decrypt_message1_payload(incoming["payload"])
-            if identity_data:
+            if not identity_data:
                 nonce_client = identity_data.get("nonceClient")
                 identity = identity_data.get("identity", "Unknown_Group")
                 if nonce_client is not None:

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 503 == 200

2 failed, 12 passed, 22 warnings in 16.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -85,7 +85,7 @@
             if identity_data:
                 nonce_client = identity_data.get("nonceClient")
                 identity = identity_data.get("identity", "Unknown_Group")
-                if nonce_client is not None:
+                if not nonce_client is not None:
                     # Store identity for later correlation with session secret
                     self.pending_identities[nonce_client] = identity

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -102,7 +102,7 @@
         Decrypt message 1 payload to extract identity and nonce_client.
         This allows us to capture the identity before passing to RMAP library.
         """
-        if not PGP_AVAILABLE:
+        if not not PGP_AVAILABLE:
             return None
 
         try:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4469e5e7111cba93: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 6

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -108,7 +108,7 @@
         try:
             # Load server private key for decryption
             server_private_key_path = str(Path(__file__).parent / "server_priv.asc")
-            if not Path(server_private_key_path).exists():
+            if not not Path(server_private_key_path).exists():
                 return None
 
             # Load the private key

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045134170670Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045135070609Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.78s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 7

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -115,7 +115,7 @@
             server_key, _ = PGPKey.from_file(server_private_key_path)
 
             # Unlock the private key if it's protected
-            if server_key.is_protected:
+            if not server_key.is_protected:
                 passphrase = os.getenv("PRIVKEY_PASSPHRASE", "")
                 if not passphrase:
                     return None

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5e493bc171f65a5f: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 8

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -117,7 +117,7 @@
             # Unlock the private key if it's protected
             if server_key.is_protected:
                 passphrase = os.getenv("PRIVKEY_PASSPHRASE", "")
-                if not passphrase:
+                if not not passphrase:
                     return None
                 server_key.unlock(passphrase)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 9

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -150,7 +150,7 @@
         watermarked PDF.
         """
         try:
-            if "payload" not in incoming:
+            if not "payload" not in incoming:
                 return {"error": "payload is required"}
 
             # Use RMAP library to handle message 2

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232506342344Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T232507238112Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 400 == 200

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 400 == 200

11 failed, 3 passed, 22 warnings in 18.59s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 10

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -157,7 +157,7 @@
             # The library will return {"result": "hex_string"} or {"error": "message"}
             result = self.rmap.handle_message2(incoming)
 
-            if "result" in result:
+            if not "result" in result:
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 11

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if not len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184138524237Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184139387630Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.77s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 12

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -170,7 +170,7 @@
                 # The session secret is (nonce_client << 64) | nonce_server
                 # We can try to find the matching identity
                 identity = self._find_identity_for_session(session_secret)
-                if identity:
+                if not identity:
                     self.session_identities[session_secret] = identity
 
                 # Store watermark metadata for this session

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 13

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -194,7 +194,7 @@
         """
         # For simple cases where there's only one pending identity,
         # use it (works for single concurrent session)
-        if self.pending_identities:
+        if not self.pending_identities:
             # Use the first available identity and clear it
             identity = next(iter(self.pending_identities.values()))
             # Clear pending identities since we've used them

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 503 == 200

1 failed, 13 passed, 22 warnings in 22.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -20,7 +20,7 @@
 try:
     from pgpy import PGPKey, PGPMessage
 
-    PGP_AVAILABLE = True
+    PGP_AVAILABLE = False
 except ImportError:
     PGP_AVAILABLE = False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -176,7 +176,7 @@
                 # Store watermark metadata for this session
                 self.watermarked_pdfs[session_secret] = {
                     "method": "robust-xmp",
-                    "created": True,
+                    "created": False,
                     "session_secret": session_secret,
                 }

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -22,7 +22,7 @@
 
     PGP_AVAILABLE = True
 except ImportError:
-    PGP_AVAILABLE = False
+    PGP_AVAILABLE = True
 
 
 class SimpleRMAP:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -21,7 +21,7 @@
     from pgpy import PGPKey, PGPMessage
 
     PGP_AVAILABLE = True
-except ImportError:
+except CosmicRayTestingException:
     PGP_AVAILABLE = False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -94,7 +94,7 @@
 
             return result
 
-        except Exception as e:
+        except CosmicRayTestingException as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
     def _decrypt_message1_payload(self, payload: str) -> dict[str, Any] | None:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -135,7 +135,7 @@
 
             return message_data
 
-        except Exception:
+        except CosmicRayTestingException:
             return None
 
     def handle_message2(self, incoming: dict[str, Any]) -> dict[str, Any]:

............FF                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_initiate ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_initiate(client):

        # Prepare payload

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        # Call route

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

    

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:513: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:553: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_initiate - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 503 == 200

2 failed, 12 passed, 22 warnings in 16.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -184,7 +184,7 @@
 
             return result
 
-        except Exception as e:
+        except CosmicRayTestingException as e:
             return {"error": f"RMAP processing error: {str(e)}"}
 
     def _find_identity_for_session(self, session_secret: str) -> str | None:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if len(session_secret) < 33:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -161,7 +161,7 @@
                 session_secret = result["result"]
 
                 # Ensure it's a 32-character hex string
-                if len(session_secret) < 32:
+                if len(session_secret) < 31:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020152706136Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020153677015Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -162,7 +162,7 @@
 
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
-                    session_secret = session_secret.zfill(32)
+                    session_secret = session_secret.zfill( 33)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -162,7 +162,7 @@
 
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
-                    session_secret = session_secret.zfill(32)
+                    session_secret = session_secret.zfill( 31)
                 elif len(session_secret) > 32:
                     session_secret = session_secret[:32]

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e92cccf2a8bcb06cf: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.76s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -163,7 +163,7 @@
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
-                elif len(session_secret) > 32:
+                elif len(session_secret) > 33:
                     session_secret = session_secret[:32]
 
                 # Try to correlate with pending identity

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -163,7 +163,7 @@
                 # Ensure it's a 32-character hex string
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
-                elif len(session_secret) > 32:
+                elif len(session_secret) > 31:
                     session_secret = session_secret[:32]
 
                 # Try to correlate with pending identity

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -164,7 +164,7 @@
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
-                    session_secret = session_secret[:32]
+                    session_secret = session_secret[: 33]
 
                 # Try to correlate with pending identity
                 # The session secret is (nonce_client << 64) | nonce_server

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- asimple_rmap.py
+++ bsimple_rmap.py
@@ -164,7 +164,7 @@
                 if len(session_secret) < 32:
                     session_secret = session_secret.zfill(32)
                 elif len(session_secret) > 32:
-                    session_secret = session_secret[:32]
+                    session_secret = session_secret[: 31]
 
                 # Try to correlate with pending identity
                 # The session secret is (nonce_client << 64) | nonce_server

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str + WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150330120300Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150331011068Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str + WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str + None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str + None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T032506098932Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T032507004147Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str + WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str + None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str + WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str - WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e9fc3190b3d7cf498: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str - WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str - None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.78s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str - None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str - WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str - None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.53s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str - WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str * WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str * WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eaf52f060e315350a: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str * None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str * None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str * WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050511100782Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050512023426Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 21.09s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str * None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str * WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180050445353Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T180051277805Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str / WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str / WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str / None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005040860595Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005041848722Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str / None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str / WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str / None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str / WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020334747869Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020335673676Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str // WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str // WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str // None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str // None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str // WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175213532607Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T175214470029Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str // None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str // WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str % WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174906641770Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174907455316Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str % WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ea20803a3979f63cb: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.81s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str % None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str % None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225854547758Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225855523096Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str % WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224434356021Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224435179697Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str % None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec892c0c1370b2b62: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str % WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

...F.....FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

4 failed, 10 passed, 22 warnings in 22.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str ** WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str ** WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str ** None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str ** None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231039590409Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231040471496Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.39s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str ** WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str ** None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005243807186Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T005244679974Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str ** WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ecb05cadd8d9b977c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 22.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str >> WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172616604371Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172617524486Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str >> WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str >> None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231405733092Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231406646870Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str >> None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str >> WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str >> None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205333758395Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205335089018Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 23.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str >> WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155847885422Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155848803307Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str << WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str << WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150712723160Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150713640790Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str << None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213122418981Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213123317126Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str << None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eeacf98f50aba8e77: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str << WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str << None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213429337253Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T213430242936Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str << WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001903101197Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001903990649Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str & WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163811174112Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T163812034672Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str & WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str & None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str & None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str & WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str & None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str & WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -65,7 +65,7 @@
     METHODS[method.name] = method
 
 
-def get_method(method: str | WatermarkingMethod) -> WatermarkingMethod:
+def get_method(method: str ^ WatermarkingMethod) -> WatermarkingMethod:
     """Resolve a method from a string name or pass-through an instance.
 
     Raises

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -89,7 +89,7 @@
 
 
 def apply_watermark(
-    method: str | WatermarkingMethod,
+    method: str ^ WatermarkingMethod,
     pdf: PdfSource,
     secret: str,
     key: str,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -93,7 +93,7 @@
     pdf: PdfSource,
     secret: str,
     key: str,
-    intended_for: str | None = None,
+    intended_for: str ^ None = None,
     position: str | None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212409567222Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T212410673593Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.72s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -94,7 +94,7 @@
     secret: str,
     key: str,
     intended_for: str | None = None,
-    position: str | None = None,
+    position: str ^ None = None,
 ) -> bytes:
     """Apply a watermark using the specified method and return new PDF bytes."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.62s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -104,7 +104,7 @@
 
 
 def is_watermarking_applicable(
-    method: str | WatermarkingMethod,
+    method: str ^ WatermarkingMethod,
     pdf: PdfSource,
     position: str | None = None,
 ) -> bool:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -106,7 +106,7 @@
 def is_watermarking_applicable(
     method: str | WatermarkingMethod,
     pdf: PdfSource,
-    position: str | None = None,
+    position: str ^ None = None,
 ) -> bool:
     """Check if watermarking is applicable using the specified method."""
     m = get_method(method)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -113,7 +113,7 @@
     return m.is_watermark_applicable(pdf=pdf, position=position)
 
 
-def read_watermark(method: str | WatermarkingMethod, pdf: PdfSource, key: str) -> str:
+def read_watermark(method: str ^ WatermarkingMethod, pdf: PdfSource, key: str) -> str:
     """Recover a secret from ``pdf`` using the specified method."""
     m = get_method(method)
     return m.read_secret(pdf=pdf, key=key)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -229,7 +229,7 @@
         children.append(node)
 
     # Also derive simple page nodes by searching for '/Type /Page'
-    page_nodes = [c for c in children if c.get("type") == "Page"]
+    page_nodes = [c for c in children if c.get("type") != "Page"]
     for i, c in enumerate(page_nodes):
         # Provide deterministic page IDs independent from object numbers
         c_page = {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -229,7 +229,7 @@
         children.append(node)
 
     # Also derive simple page nodes by searching for '/Type /Page'
-    page_nodes = [c for c in children if c.get("type") == "Page"]
+    page_nodes = [c for c in children if c.get("type") < "Page"]
     for i, c in enumerate(page_nodes):
         # Provide deterministic page IDs independent from object numbers
         c_page = {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -229,7 +229,7 @@
         children.append(node)
 
     # Also derive simple page nodes by searching for '/Type /Page'
-    page_nodes = [c for c in children if c.get("type") == "Page"]
+    page_nodes = [c for c in children if c.get("type") <= "Page"]
     for i, c in enumerate(page_nodes):
         # Provide deterministic page IDs independent from object numbers
         c_page = {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -229,7 +229,7 @@
         children.append(node)
 
     # Also derive simple page nodes by searching for '/Type /Page'
-    page_nodes = [c for c in children if c.get("type") == "Page"]
+    page_nodes = [c for c in children if c.get("type") > "Page"]
     for i, c in enumerate(page_nodes):
         # Provide deterministic page IDs independent from object numbers
         c_page = {

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055744045489Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T055744932401Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -229,7 +229,7 @@
         children.append(node)
 
     # Also derive simple page nodes by searching for '/Type /Page'
-    page_nodes = [c for c in children if c.get("type") == "Page"]
+    page_nodes = [c for c in children if c.get("type") >= "Page"]
     for i, c in enumerate(page_nodes):
         # Provide deterministic page IDs independent from object numbers
         c_page = {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -229,7 +229,7 @@
         children.append(node)
 
     # Also derive simple page nodes by searching for '/Type /Page'
-    page_nodes = [c for c in children if c.get("type") == "Page"]
+    page_nodes = [c for c in children if c.get("type") is "Page"]
     for i, c in enumerate(page_nodes):
         # Provide deterministic page IDs independent from object numbers
         c_page = {

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024909548642Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024910432032Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



watermarking_utils.py:232

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\watermarking_utils.py:232: SyntaxWarning: "is" with 'str' literal. Did you mean "=="?

    page_nodes = [c for c in children if c.get("type") is "Page"]



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 23 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -229,7 +229,7 @@
         children.append(node)
 
     # Also derive simple page nodes by searching for '/Type /Page'
-    page_nodes = [c for c in children if c.get("type") == "Page"]
+    page_nodes = [c for c in children if c.get("type") is not "Page"]
     for i, c in enumerate(page_nodes):
         # Provide deterministic page IDs independent from object numbers
         c_page = {

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



watermarking_utils.py:232

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\watermarking_utils.py:232: SyntaxWarning: "is not" with 'str' literal. Did you mean "!="?

    page_nodes = [c for c in children if c.get("type") is not "Page"]



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -73,7 +73,7 @@
     KeyError
         If ``method`` is a string not present in :data:`METHODS`.
     """
-    if isinstance(method, WatermarkingMethod):
+    if not isinstance(method, WatermarkingMethod):
         return method
     try:
         return METHODS[method]

........FFF..F                                                           [100%]

================================== FAILURES ===================================

_____________________ test_get_watermarking_methods_route _____________________



client = <FlaskClient <Flask 'server'>>



    def test_get_watermarking_methods_route(client):

        """Test get watermarking methods endpoint."""

>       resp = client.get("/api/get-watermarking-methods")

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:297: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.get("/api/get-watermarking-methods")

    def get_watermarking_methods():

        methods = []

    

        for m in WMUtils.METHODS:

            methods.append(

>               {"name": m, "description": WMUtils.get_method(m).get_usage()}

                                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

            )

E           AttributeError: 'str' object has no attribute 'get_usage'



server.py:1137: AttributeError

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 49 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: 'str' object has no attribute 'is_watermark_applicable'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: 'str' object has no attribute 'read_secret'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e70e8a43d7ee8132d: 'str' object has no attribute 'is_watermark_applicable'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_watermarking_methods_route - AttributeEr...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

4 failed, 10 passed, 22 warnings in 19.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -188,7 +188,7 @@
                 s = doc.xref_object(xref, compressed=False) or ""
             except Exception:
                 s = ""
-            s_bytes = s.encode("latin-1", "replace") if isinstance(s, str) else b""
+            s_bytes = s.encode("latin-1", "replace") if not isinstance(s, str) else b""
             # Type detection
             m = _TYPE_RE.search(s_bytes)
             pdf_type = m.group(1).decode("ascii", "replace") if m else "Object"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -191,7 +191,7 @@
             s_bytes = s.encode("latin-1", "replace") if isinstance(s, str) else b""
             # Type detection
             m = _TYPE_RE.search(s_bytes)
-            pdf_type = m.group(1).decode("ascii", "replace") if m else "Object"
+            pdf_type = m.group(1).decode("ascii", "replace") if not m else "Object"
             node = {
                 "id": f"obj:{xref:06d}",
                 "type": pdf_type,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -197,7 +197,7 @@
                 "type": pdf_type,
                 "xref": xref,
                 "is_stream": bool(doc.xref_is_stream(xref)),
-                "content_sha1": _sha1(s_bytes) if s_bytes else None,
+                "content_sha1": _sha1(s_bytes) if not s_bytes else None,
             }
             root["children"].append(node)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -214,7 +214,7 @@
         gen_num = int(m.group(2))
         start = m.end()
         end_match = _ENDOBJ_RE.search(data, start)
-        end = end_match.start() if end_match else start
+        end = end_match.start() if not end_match else start
         slice_bytes = data[start:end]
         # Guess type
         t = _TYPE_RE.search(slice_bytes)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -218,7 +218,7 @@
         slice_bytes = data[start:end]
         # Guess type
         t = _TYPE_RE.search(slice_bytes)
-        pdf_type = t.group(1).decode("ascii", "replace") if t else "Object"
+        pdf_type = t.group(1).decode("ascii", "replace") if not t else "Object"
         node = {
             "id": f"obj:{obj_num:06d}:{gen_num:05d}",
             "type": pdf_type,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165342721988Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T165343590152Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -130,7 +130,7 @@
 
 
 def _sha1(b: bytes) -> str:
-    return hashlib.sha1(b, usedforsecurity=False).hexdigest()
+    return hashlib.sha1(b, usedforsecurity=True).hexdigest()
 
 
 def explore_pdf(pdf: PdfSource) -> dict[str, Any]:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -185,7 +185,7 @@
         xref_len = doc.xref_length()
         for xref in range(1, xref_len):
             try:
-                s = doc.xref_object(xref, compressed=False) or ""
+                s = doc.xref_object(xref, compressed=True) or ""
             except Exception:
                 s = ""
             s_bytes = s.encode("latin-1", "replace") if isinstance(s, str) else b""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -185,7 +185,7 @@
         xref_len = doc.xref_length()
         for xref in range(1, xref_len):
             try:
-                s = doc.xref_object(xref, compressed=False) or ""
+                s = doc.xref_object(xref, compressed=False) and ""
             except Exception:
                 s = ""
             s_bytes = s.encode("latin-1", "replace") if isinstance(s, str) else b""

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153407097648Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153407982634Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -77,7 +77,7 @@
         return method
     try:
         return METHODS[method]
-    except KeyError as exc:
+    except CosmicRayTestingException as exc:
         raise KeyError(
             f"Unknown watermarking method: {method!r}. Known: {sorted(METHODS)}"
         ) from exc

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -186,7 +186,7 @@
         for xref in range(1, xref_len):
             try:
                 s = doc.xref_object(xref, compressed=False) or ""
-            except Exception:
+            except CosmicRayTestingException:
                 s = ""
             s_bytes = s.encode("latin-1", "replace") if isinstance(s, str) else b""
             # Type detection

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -203,7 +203,7 @@
 
         doc.close()
         return root
-    except Exception:
+    except CosmicRayTestingException:
         # Fallback: regex-based object scanning (no third-party deps)
         ...

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160827502794Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160828350955Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -183,7 +183,7 @@
 
         # XRef objects
         xref_len = doc.xref_length()
-        for xref in range(1, xref_len):
+        for xref in range( 2, xref_len):
             try:
                 s = doc.xref_object(xref, compressed=False) or ""
             except Exception:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -183,7 +183,7 @@
 
         # XRef objects
         xref_len = doc.xref_length()
-        for xref in range(1, xref_len):
+        for xref in range( 0, xref_len):
             try:
                 s = doc.xref_object(xref, compressed=False) or ""
             except Exception:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -191,7 +191,7 @@
             s_bytes = s.encode("latin-1", "replace") if isinstance(s, str) else b""
             # Type detection
             m = _TYPE_RE.search(s_bytes)
-            pdf_type = m.group(1).decode("ascii", "replace") if m else "Object"
+            pdf_type = m.group( 2).decode("ascii", "replace") if m else "Object"
             node = {
                 "id": f"obj:{xref:06d}",
                 "type": pdf_type,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -191,7 +191,7 @@
             s_bytes = s.encode("latin-1", "replace") if isinstance(s, str) else b""
             # Type detection
             m = _TYPE_RE.search(s_bytes)
-            pdf_type = m.group(1).decode("ascii", "replace") if m else "Object"
+            pdf_type = m.group( 0).decode("ascii", "replace") if m else "Object"
             node = {
                 "id": f"obj:{xref:06d}",
                 "type": pdf_type,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -210,7 +210,7 @@
     # Regex fallback: enumerate uncompressed objects
     children: list[dict[str, Any]] = []
     for m in _OBJ_RE.finditer(data):
-        obj_num = int(m.group(1))
+        obj_num = int(m.group( 2))
         gen_num = int(m.group(2))
         start = m.end()
         end_match = _ENDOBJ_RE.search(data, start)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -210,7 +210,7 @@
     # Regex fallback: enumerate uncompressed objects
     children: list[dict[str, Any]] = []
     for m in _OBJ_RE.finditer(data):
-        obj_num = int(m.group(1))
+        obj_num = int(m.group( 0))
         gen_num = int(m.group(2))
         start = m.end()
         end_match = _ENDOBJ_RE.search(data, start)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -211,7 +211,7 @@
     children: list[dict[str, Any]] = []
     for m in _OBJ_RE.finditer(data):
         obj_num = int(m.group(1))
-        gen_num = int(m.group(2))
+        gen_num = int(m.group( 3))
         start = m.end()
         end_match = _ENDOBJ_RE.search(data, start)
         end = end_match.start() if end_match else start

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051237195296Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051238201593Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -211,7 +211,7 @@
     children: list[dict[str, Any]] = []
     for m in _OBJ_RE.finditer(data):
         obj_num = int(m.group(1))
-        gen_num = int(m.group(2))
+        gen_num = int(m.group( 1))
         start = m.end()
         end_match = _ENDOBJ_RE.search(data, start)
         end = end_match.start() if end_match else start

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -218,7 +218,7 @@
         slice_bytes = data[start:end]
         # Guess type
         t = _TYPE_RE.search(slice_bytes)
-        pdf_type = t.group(1).decode("ascii", "replace") if t else "Object"
+        pdf_type = t.group( 2).decode("ascii", "replace") if t else "Object"
         node = {
             "id": f"obj:{obj_num:06d}:{gen_num:05d}",
             "type": pdf_type,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011112076902Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T011112932768Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.29s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -218,7 +218,7 @@
         slice_bytes = data[start:end]
         # Guess type
         t = _TYPE_RE.search(slice_bytes)
-        pdf_type = t.group(1).decode("ascii", "replace") if t else "Object"
+        pdf_type = t.group( 0).decode("ascii", "replace") if t else "Object"
         node = {
             "id": f"obj:{obj_num:06d}:{gen_num:05d}",
             "type": pdf_type,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 0

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -172,7 +172,7 @@
 
         doc = fitz.open(stream=data, filetype="pdf")
         # Pages as first-class nodes
-        for page_index in range(doc.page_count):
+        for page_index in []:
             node = {
                 "id": f"page:{page_index:04d}",
                 "type": "Page",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ZeroIterationForLoop, occurrence: 1

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -183,7 +183,7 @@
 
         # XRef objects
         xref_len = doc.xref_length()
-        for xref in range(1, xref_len):
+        for xref in []:
             try:
                 s = doc.xref_object(xref, compressed=False) or ""
             except Exception:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183742599074Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183743482048Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 2

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -209,7 +209,7 @@
 
     # Regex fallback: enumerate uncompressed objects
     children: list[dict[str, Any]] = []
-    for m in _OBJ_RE.finditer(data):
+    for m in []:
         obj_num = int(m.group(1))
         gen_num = int(m.group(2))
         start = m.end()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.78s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 3

--- mutation diff ---
--- awatermarking_utils.py
+++ bwatermarking_utils.py
@@ -230,7 +230,7 @@
 
     # Also derive simple page nodes by searching for '/Type /Page'
     page_nodes = [c for c in children if c.get("type") == "Page"]
-    for i, c in enumerate(page_nodes):
+    for i, c in []:
         # Provide deterministic page IDs independent from object numbers
         c_page = {
             "id": f"page:{i:04d}",

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.52s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data - secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.77s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data * secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data / secret_bytes
 
     def is_watermark_applicable(
         self,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233011991806Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233012868756Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data // secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data % secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data ** secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data >> secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data << secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data | secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data & secret_bytes
 
     def is_watermark_applicable(
         self,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -49,7 +49,7 @@
         data = load_pdf_bytes(pdf)
         # Safely append the secret to the PDF data
         secret_bytes = secret.encode("utf-8")
-        return data + secret_bytes
+        return data ^ secret_bytes
 
     def is_watermark_applicable(
         self,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222441260075Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T222442083256Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str + None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str - None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str * None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e406dbbfc06f836e1: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str / None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bool:
         return True

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str // None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str % None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bool:
         return True

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010827473347Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T010828347285Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ** None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str >> None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bool:
         return True

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194145347052Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194146218729Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.88s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str << None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str & None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153626862438Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153627768782Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e2305c4b955f74882: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.78s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -38,7 +38,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ^ None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -39,7 +39,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bytes:
         """Return a new PDF with a watermark record appended.

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eccbbce2609cf3023: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -54,7 +54,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bool:
         return True

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_USub_UAdd, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -70,7 +70,7 @@
         if not eof_matches:
             return ""
 
-        last_eof = eof_matches[-1]
+        last_eof = eof_matches[+1]
         # Return everything after the last %%EOF
         after_eof = text_data[last_eof.end() :]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_USub_Invert, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -70,7 +70,7 @@
         if not eof_matches:
             return ""
 
-        last_eof = eof_matches[-1]
+        last_eof = eof_matches[~1]
         # Return everything after the last %%EOF
         after_eof = text_data[last_eof.end() :]

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_USub_Not, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -70,7 +70,7 @@
         if not eof_matches:
             return ""
 
-        last_eof = eof_matches[-1]
+        last_eof = eof_matches[not 1]
         # Return everything after the last %%EOF
         after_eof = text_data[last_eof.end() :]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160424502986Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T160425410817Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_USub, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -70,7 +70,7 @@
         if not eof_matches:
             return ""
 
-        last_eof = eof_matches[-1]
+        last_eof = eof_matches[1]
         # Return everything after the last %%EOF
         after_eof = text_data[last_eof.end() :]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -67,7 +67,7 @@
 
         # Find the last occurrence of %%EOF
         eof_matches = list(re.finditer(r"%%EOF", text_data))
-        if not eof_matches:
+        if  eof_matches:
             return ""
 
         last_eof = eof_matches[-1]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -67,7 +67,7 @@
 
         # Find the last occurrence of %%EOF
         eof_matches = list(re.finditer(r"%%EOF", text_data))
-        if not eof_matches:
+        if not not eof_matches:
             return ""
 
         last_eof = eof_matches[-1]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -56,7 +56,7 @@
         pdf: PdfSource,
         position: str | None = None,
     ) -> bool:
-        return True
+        return False
 
     def read_secret(self, pdf, key: str) -> str:
         """Extract the secret if present.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -70,7 +70,7 @@
         if not eof_matches:
             return ""
 
-        last_eof = eof_matches[-1]
+        last_eof = eof_matches[- 2]
         # Return everything after the last %%EOF
         after_eof = text_data[last_eof.end() :]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -70,7 +70,7 @@
         if not eof_matches:
             return ""
 
-        last_eof = eof_matches[-1]
+        last_eof = eof_matches[- 0]
         # Return everything after the last %%EOF
         after_eof = text_data[last_eof.end() :]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- aold methods\unsafe_bash_bridge_append_eof.py
+++ bold methods\unsafe_bash_bridge_append_eof.py
@@ -21,12 +21,6 @@
     """Toy method that appends a watermark record after the PDF EOF."""
 
     name = "bash-bridge-eof"
-
-    # ---------------------
-    # Public API overrides
-    # ---------------------
-
-    @staticmethod
     def get_usage() -> str:
         return (
             "Toy method that appends a watermark record after the PDF EOF. "

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052156577737Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T052157431947Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes + bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for +: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str + os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for +: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str + None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060219360093Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T060220402495Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.70s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes - bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for -: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.68s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str - os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for -: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str - None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022217219916Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T022218227001Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes * bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152637912368Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152638754277Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str * os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for *: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.53s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str * None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193733527556Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193734465082Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes / bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for /: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str / os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.FFFFF.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234033684839Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T234034620949Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

10 failed, 4 passed, 22 warnings in 19.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str / None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes // bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for //: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str // os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.66s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str // None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes % bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str % os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for %: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.56s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str % None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020112003669Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T020112970136Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes ** bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str ** os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for ** or pow(): 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ** None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes >> bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for >>: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str >> os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for >>: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str >> None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e082eb04fe2cfaa1c: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes << bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for <<: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str << os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for <<: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str << None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205451703071Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T205452737234Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.65s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes & bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for &: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str & os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for &: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str & None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee67e1b0c45e9e3fa: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.60s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if isinstance(src, bytes ^ bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for ^: 'type' and 'type'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -97,7 +97,7 @@
     """
     if isinstance(src, bytes | bytearray):
         data = bytes(src)
-    elif isinstance(src, str | os.PathLike):
+    elif isinstance(src, str ^ os.PathLike):
         with open(os.fspath(src), "rb") as fh:
             data = fh.read()
     elif hasattr(src, "read"):

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: unsupported operand type(s) for ^: 'type' and 'ABCMeta'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.55s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -160,7 +160,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ^ None = None,
         position: str | None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030801938030Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030802900414Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -161,7 +161,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bytes:
         """Return a new PDF with an embedded watermark.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -200,7 +200,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bool:
         """Return whether the method is applicable on this specific method

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155322141026Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T155323073301Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -106,7 +106,7 @@
     else:
         raise TypeError("Unsupported PdfSource; expected bytes, path, or binary IO")
 
-    if not is_pdf_bytes(data):
+    if  is_pdf_bytes(data):
         raise ValueError("Input does not look like a valid PDF (missing %PDF header)")
     return data

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235402872722Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235403748359Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -95,7 +95,7 @@
     ValueError
         If the resolved bytes do not appear to be a PDF file.
     """
-    if isinstance(src, bytes | bytearray):
+    if not isinstance(src, bytes | bytearray):
         data = bytes(src)
     elif isinstance(src, str | os.PathLike):
         with open(os.fspath(src), "rb") as fh:

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: string argument without an encoding

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -106,7 +106,7 @@
     else:
         raise TypeError("Unsupported PdfSource; expected bytes, path, or binary IO")
 
-    if not is_pdf_bytes(data):
+    if not not is_pdf_bytes(data):
         raise ValueError("Input does not look like a valid PDF (missing %PDF header)")
     return data

.........FF..F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: Input does not look like a valid PDF (missing %PDF header)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 19.65s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -138,8 +138,6 @@
     #: Concrete implementations should override this with a short name
     #: (e.g., "toy-eof", "xmp-metadata", "object-stream").
     name: ClassVar[str] = "abstract"
-
-    @staticmethod
     @abstractmethod
     def get_usage() -> str:
         """Return a a string containing a description of the expected usage.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 1

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -140,7 +140,6 @@
     name: ClassVar[str] = "abstract"
 
     @staticmethod
-    @abstractmethod
     def get_usage() -> str:
         """Return a a string containing a description of the expected usage.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 2

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -153,8 +153,6 @@
             Usage description.
         """
         raise NotImplementedError
-
-    @abstractmethod
     def add_watermark(
         self,
         pdf: PdfSource,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.70s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/RemoveDecorator, occurrence: 3

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -195,8 +195,6 @@
             If inputs are invalid (e.g., not a PDF or empty secret).
         """
         raise NotImplementedError
-
-    @abstractmethod
     def is_watermark_applicable(
         self,
         pdf: PdfSource,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 4

--- mutation diff ---
--- awatermarking_method.py
+++ bwatermarking_method.py
@@ -229,8 +229,6 @@
             If inputs are invalid (e.g., not a PDF or empty secret).
         """
         raise NotImplementedError
-
-    @abstractmethod
     def read_secret(self, pdf: PdfSource, key: str) -> str:
         """Extract and return the embedded secret from ``pdf``.

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e63fc3c6e4198db91: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.96s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " - intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for -: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for - "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for -: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 21.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " * intended_for + "\nDo not disclose"
         )
 
         if not secret:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025230158916Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025231049205Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for * "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: can't multiply sequence by non-int of type 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " / intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for / "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for /: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " // intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for //: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for // "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for //: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " % intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: not all arguments converted during string formatting

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for % "\nDo not disclose"
         )
 
         if not secret:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004800572292Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004801469515Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " ** intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for ** or pow(): 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for ** "\nDo not disclose"
         )
 
         if not secret:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041646699048Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041647729624Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " >> intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for >>: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for >> "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for >>: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " << intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for <<: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for << "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for <<: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.24s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " | intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for |: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 19.88s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for | "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for |: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " & intended_for + "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for &: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for & "\nDo not disclose"
         )
 
         if not secret:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012438595509Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T012439523954Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " ^ intended_for + "\nDo not disclose"
         )
 
         if not secret:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024710965686Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024711847860Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -99,7 +99,7 @@
         if not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
-            data, "Intended for: " + intended_for + "\nDo not disclose"
+            data, "Intended for: " + intended_for ^ "\nDo not disclose"
         )
 
         if not secret:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: unsupported operand type(s) for ^: 'str' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str + None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str + None = None,

                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T01:45:38+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:45:38+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T01:45:39+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:45:39+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str + None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T23:10:43+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:10:44+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T23:10:45+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:10:45+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str + None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for +: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:15:25+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:15:25+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T03:15:26+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:15:26+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for +: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str - None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str - None = None,

                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T06:34:21+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:34:21+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T06:34:22+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:34:22+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.93s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str - None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T19:39:39+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:39:39+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T19:39:40+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T19:39:40+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 12.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str - None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for -: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T23:37:41+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:37:41+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T23:37:42+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:37:42+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for -: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str * None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str * None = None,

                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T23:25:39+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:25:39+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T23:25:40+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:25:40+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str * None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T01:37:03+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:37:03+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T01:37:04+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T01:37:04+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str * None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for *: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T04:51:21+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T04:51:21+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T04:51:22+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T04:51:22+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for *: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str / None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str / None = None,

                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T21:50:27+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T21:50:28+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T21:50:29+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T21:50:29+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str / None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T04:44:22+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T04:44:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T04:44:24+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T04:44:24+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str / None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for /: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T16:29:58+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:29:58+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T16:29:59+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:29:59+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for /: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.16s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str // None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str // None = None,

                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T02:11:09+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:11:09+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T02:11:10+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:11:10+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 12.93s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str // None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T22:51:32+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:51:32+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T22:51:33+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:51:33+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str // None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for //: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:02:53+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:02:53+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T18:02:54+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:02:54+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for //: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str % None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str % None = None,

                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T17:16:59+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:16:59+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T17:17:00+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:17:00+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str % None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:02:40+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:02:40+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T18:02:41+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:02:41+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str % None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for %: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T17:12:58+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:12:59+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T17:13:00+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T17:13:00+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for %: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.04s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ** None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str ** None = None,

                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T18:07:39+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:07:39+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T18:07:40+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T18:07:40+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 12.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str ** None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T02:05:02+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:05:02+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T02:05:03+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T02:05:03+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 12.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str ** None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ** or pow(): 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T21:20:57+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T21:20:57+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T21:20:58+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T21:20:58+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ** or ...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str >> None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str >> None = None,

                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T07:56:20+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:56:20+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T07:56:21+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T07:56:21+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str >> None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T08:17:45+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:17:45+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Network softsec-tatou_default  Removed

time="2025-10-17T08:17:46+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T08:17:46+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str >> None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for >>: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T16:18:58+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:18:58+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T16:18:59+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T16:18:59+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for >>: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str << None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str << None = None,

                  ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T23:06:44+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:06:44+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T23:06:45+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T23:06:45+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str << None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T00:30:00+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T00:30:00+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T00:30:01+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T00:30:01+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str << None = None,

              ^^^^^^^^^^^

E   TypeError: unsupported operand type(s) for <<: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:56:23+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:56:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T03:56:24+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:56:24+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for <<: 't...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str & None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str & None = None,

                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T06:22:22+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:22:22+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-17T06:22:23+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:22:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str & None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T22:36:47+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:36:47+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-16T22:36:48+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:36:49+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str & None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for &: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T03:34:55+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:34:55+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_grafana-data  Resource is still in use

 Volume softsec-tatou_user-files  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T03:34:56+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T03:34:56+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for &: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 12.94s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -89,7 +89,7 @@
         pdf,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ^ None = None,
         position: str | None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:92: in StructuralOverlay

    intended_for: str ^ None = None,

                  ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T05:20:49+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T05:20:49+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removed

time="2025-10-17T05:20:50+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T05:20:51+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -90,7 +90,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bytes:
         data = load_pdf_bytes(pdf)
         # Add a visible watermark. This might confuse the attackers,


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:93: in StructuralOverlay

    position: str ^ None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-16T22:46:45+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:46:45+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_db-data  Removed

 Network softsec-tatou_default  Removed

time="2025-10-16T22:46:47+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-16T22:46:47+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -122,7 +122,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bool:
         return True


=================================== ERRORS ====================================

______________________ ERROR collecting test/test_api.py ______________________

..\test\test_api.py:33: in <module>

    from server import create_app

server.py:16: in <module>

    import watermarking_utils as WMUtils

watermarking_utils.py:38: in <module>

    from structural_and_overlay_watermark import StructuralOverlay

structural_and_overlay_watermark.py:24: in <module>

    class StructuralOverlay(WatermarkingMethod):

structural_and_overlay_watermark.py:125: in StructuralOverlay

    position: str ^ None = None,

              ^^^^^^^^^^

E   TypeError: unsupported operand type(s) for ^: 'type' and 'NoneType'

------------------------------- Captured stdout -------------------------------

Running prepare_env.bat...

Waiting for db to be ready...

------------------------------- Captured stderr -------------------------------

time="2025-10-17T06:43:22+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:43:22+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Container softsec-tatou-db-1  Stopping

 Container softsec-tatou-db-1  Stopped

 Container softsec-tatou-db-1  Removing

 Container softsec-tatou-db-1  Removed

 Volume softsec-tatou_user-files  Removing

 Volume softsec-tatou_db-data  Removing

 Volume softsec-tatou_grafana-data  Removing

 Volume softsec-tatou_db-data  Removed

 Volume softsec-tatou_user-files  Resource is still in use

 Volume softsec-tatou_grafana-data  Resource is still in use

 Network softsec-tatou_default  Removing

 Network softsec-tatou_default  Removed

time="2025-10-17T06:43:23+02:00" level=warning msg="The \"METRICS_TOKEN\" variable is not set. Defaulting to a blank string."

time="2025-10-17T06:43:23+02:00" level=warning msg="The \"SECRET_KEY\" variable is not set. Defaulting to a blank string."

 Network softsec-tatou_default  Creating

 Network softsec-tatou_default  Created

 Volume "softsec-tatou_db-data"  Creating

 Volume "softsec-tatou_db-data"  Created

 Container softsec-tatou-db-1  Creating

 Container softsec-tatou-db-1  Created

 Container softsec-tatou-db-1  Starting

 Container softsec-tatou-db-1  Started

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

ERROR ..\test\test_api.py - TypeError: unsupported operand type(s) for ^: 'ty...

!!!!!!!!!!!!!!!!!!! Interrupted: 1 error during collection !!!!!!!!!!!!!!!!!!!!

7 warnings, 1 error in 13.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -96,7 +96,7 @@
         # Add a visible watermark. This might confuse the attackers,
         # suggesting that the only watermark is the visible watermark.
         # It also works as a deterrent against document diffusion.
-        if not intended_for:
+        if  intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
             data, "Intended for: " + intended_for + "\nDo not disclose"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: Missing recipient. (intended_for)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 21.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -102,7 +102,7 @@
             data, "Intended for: " + intended_for + "\nDo not disclose"
         )
 
-        if not secret:
+        if  secret:
             raise ValueError("Secret must be a non-empty string")
         if not isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: Secret must be a non-empty string

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 19.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -104,7 +104,7 @@
 
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if  isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")
 
         # Add the "real" watermark by embedding the secret into

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164844215132Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164845091167Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 3

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -104,7 +104,7 @@
 
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if not isinstance(key, str) or  key:
             raise ValueError("Key must be a non-empty string")
 
         # Add the "real" watermark by embedding the secret into

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174210930318Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T174211809167Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -96,7 +96,7 @@
         # Add a visible watermark. This might confuse the attackers,
         # suggesting that the only watermark is the visible watermark.
         # It also works as a deterrent against document diffusion.
-        if not intended_for:
+        if not not intended_for:
             raise ValueError("Missing recipient. (intended_for)")
         visibly_watermarked = self.visible_watermark(
             data, "Intended for: " + intended_for + "\nDo not disclose"

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: Missing recipient. (intended_for)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -102,7 +102,7 @@
             data, "Intended for: " + intended_for + "\nDo not disclose"
         )
 
-        if not secret:
+        if not not secret:
             raise ValueError("Secret must be a non-empty string")
         if not isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: Secret must be a non-empty string

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.62s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -104,7 +104,7 @@
 
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if not not isinstance(key, str) or not key:
             raise ValueError("Key must be a non-empty string")
 
         # Add the "real" watermark by embedding the secret into

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: Key must be a non-empty string

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 21.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -150,7 +150,7 @@
         for page in reader.pages:
             # Check for our custom structural watermark
             watermark_obj = page.get("/PieceInfo")
-            if watermark_obj and obfuscated_key in watermark_obj:
+            if not watermark_obj and obfuscated_key in watermark_obj:
                 hidden = watermark_obj[obfuscated_key]
                 # Extract string
                 encrypted_str = str(hidden)

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -45,7 +45,7 @@
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
-                overlay=True,
+                overlay=False,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,
                 stroke_opacity=0.5,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -124,7 +124,7 @@
         pdf: PdfSource,
         position: str | None = None,
     ) -> bool:
-        return True
+        return False
 
     @staticmethod
     def derive_fernet_key(password: str) -> bytes:

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse streamed [400 BAD REQUEST]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 21.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceAndWithOr, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -150,7 +150,7 @@
         for page in reader.pages:
             # Check for our custom structural watermark
             watermark_obj = page.get("/PieceInfo")
-            if watermark_obj and obfuscated_key in watermark_obj:
+            if watermark_obj or obfuscated_key in watermark_obj:
                 hidden = watermark_obj[obfuscated_key]
                 # Extract string
                 encrypted_str = str(hidden)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceOrWithAnd, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -74,7 +74,7 @@
         obfuscated_key = NameObject("/XObjD5fA2e1")
 
         for page in reader.pages:
-            piece_info = page.get("/PieceInfo") or DictionaryObject()
+            piece_info = page.get("/PieceInfo") and DictionaryObject()
             piece_info.update({obfuscated_key: create_string_object(hidden_data)})
             page[NameObject("/PieceInfo")] = piece_info
             writer.add_page(page)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceOrWithAnd, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -104,7 +104,7 @@
 
         if not secret:
             raise ValueError("Secret must be a non-empty string")
-        if not isinstance(key, str) or not key:
+        if not isinstance(key, str) and not key:
             raise ValueError("Key must be a non-empty string")
 
         # Add the "real" watermark by embedding the secret into

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.52s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -161,7 +161,7 @@
                     fernet = Fernet(derived_key)
                     decrypted = fernet.decrypt(encrypted_str.encode()).decode()
                     extracted_data.append(decrypted)
-                except InvalidToken as e:
+                except CosmicRayTestingException as e:
                     raise InvalidKeyError("Failed to decrypt watermark") from e
             else:
                 extracted_data.append(None)  # No watermark found on this page

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.53s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -39,7 +39,7 @@
 
         for page in doc:
             page.insert_text(
-                (72, 72),  # Top-left corner (x, y)
+                ( 73, 72),  # Top-left corner (x, y)
                 visible_watermark,
                 fontsize=18,
                 rotate=0,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.52s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -39,7 +39,7 @@
 
         for page in doc:
             page.insert_text(
-                (72, 72),  # Top-left corner (x, y)
+                ( 71, 72),  # Top-left corner (x, y)
                 visible_watermark,
                 fontsize=18,
                 rotate=0,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -39,7 +39,7 @@
 
         for page in doc:
             page.insert_text(
-                (72, 72),  # Top-left corner (x, y)
+                (72, 73),  # Top-left corner (x, y)
                 visible_watermark,
                 fontsize=18,
                 rotate=0,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -39,7 +39,7 @@
 
         for page in doc:
             page.insert_text(
-                (72, 72),  # Top-left corner (x, y)
+                (72, 71),  # Top-left corner (x, y)
                 visible_watermark,
                 fontsize=18,
                 rotate=0,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -41,7 +41,7 @@
             page.insert_text(
                 (72, 72),  # Top-left corner (x, y)
                 visible_watermark,
-                fontsize=18,
+                fontsize= 19,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -41,7 +41,7 @@
             page.insert_text(
                 (72, 72),  # Top-left corner (x, y)
                 visible_watermark,
-                fontsize=18,
+                fontsize= 17,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e90a1a15266357174: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -42,7 +42,7 @@
                 (72, 72),  # Top-left corner (x, y)
                 visible_watermark,
                 fontsize=18,
-                rotate=0,
+                rotate= 1,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e955345436d2b0801: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.77s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -42,7 +42,7 @@
                 (72, 72),  # Top-left corner (x, y)
                 visible_watermark,
                 fontsize=18,
-                rotate=0,
+                rotate= -1,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025935120547Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025936028113Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -43,7 +43,7 @@
                 visible_watermark,
                 fontsize=18,
                 rotate=0,
-                fill=(0.6, 0.6, 0.6),  # fill color (gray)
+                fill=( 1.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151136131247Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T151137062456Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -43,7 +43,7 @@
                 visible_watermark,
                 fontsize=18,
                 rotate=0,
-                fill=(0.6, 0.6, 0.6),  # fill color (gray)
+                fill=( -0.4, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: need 1, 3 or 4 color components in range 0 to 1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 10

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -43,7 +43,7 @@
                 visible_watermark,
                 fontsize=18,
                 rotate=0,
-                fill=(0.6, 0.6, 0.6),  # fill color (gray)
+                fill=(0.6, 1.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e88013685be8b2b50: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.80s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 11

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -43,7 +43,7 @@
                 visible_watermark,
                 fontsize=18,
                 rotate=0,
-                fill=(0.6, 0.6, 0.6),  # fill color (gray)
+                fill=(0.6, -0.4, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: need 1, 3 or 4 color components in range 0 to 1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 12

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -43,7 +43,7 @@
                 visible_watermark,
                 fontsize=18,
                 rotate=0,
-                fill=(0.6, 0.6, 0.6),  # fill color (gray)
+                fill=(0.6, 0.6, 1.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e74ebccdece3bc344: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 13

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -43,7 +43,7 @@
                 visible_watermark,
                 fontsize=18,
                 rotate=0,
-                fill=(0.6, 0.6, 0.6),  # fill color (gray)
+                fill=(0.6, 0.6, -0.4),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: need 1, 3 or 4 color components in range 0 to 1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 21.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 14

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -44,7 +44,7 @@
                 fontsize=18,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
-                color=(0, 0, 0),
+                color=( 1, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 15

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -44,7 +44,7 @@
                 fontsize=18,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
-                color=(0, 0, 0),
+                color=( -1, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: need 1, 3 or 4 color components in range 0 to 1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 21.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 16

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -44,7 +44,7 @@
                 fontsize=18,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
-                color=(0, 0, 0),
+                color=(0, 1, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002021825586Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T002022726138Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 17

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -44,7 +44,7 @@
                 fontsize=18,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
-                color=(0, 0, 0),
+                color=(0, -1, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040258474221Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T040300414456Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 24.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 18

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -44,7 +44,7 @@
                 fontsize=18,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
-                color=(0, 0, 0),
+                color=(0, 0, 1),
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 19

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -44,7 +44,7 @@
                 fontsize=18,
                 rotate=0,
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
-                color=(0, 0, 0),
+                color=(0, 0, -1),
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: need 1, 3 or 4 color components in range 0 to 1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 20

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -46,7 +46,7 @@
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
-                render_mode=2,  # stroke + fill
+                render_mode= 3,  # stroke + fill
                 fill_opacity=0.5,
                 stroke_opacity=0.5,
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 21

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -46,7 +46,7 @@
                 fill=(0.6, 0.6, 0.6),  # fill color (gray)
                 color=(0, 0, 0),
                 overlay=True,
-                render_mode=2,  # stroke + fill
+                render_mode= 1,  # stroke + fill
                 fill_opacity=0.5,
                 stroke_opacity=0.5,
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 22

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -47,7 +47,7 @@
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill
-                fill_opacity=0.5,
+                fill_opacity= 1.5,
                 stroke_opacity=0.5,
             )

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T162533531215Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T162534430053Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 23

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -47,7 +47,7 @@
                 color=(0, 0, 0),
                 overlay=True,
                 render_mode=2,  # stroke + fill
-                fill_opacity=0.5,
+                fill_opacity= -0.5,
                 stroke_opacity=0.5,
             )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 24

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -48,7 +48,7 @@
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,
-                stroke_opacity=0.5,
+                stroke_opacity= 1.5,
             )
 
         output_stream = BytesIO()

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191046926459Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T191047806856Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.59s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 25

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -48,7 +48,7 @@
                 overlay=True,
                 render_mode=2,  # stroke + fill
                 fill_opacity=0.5,
-                stroke_opacity=0.5,
+                stroke_opacity= -0.5,
             )
 
         output_stream = BytesIO()

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 26

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -54,7 +54,7 @@
         output_stream = BytesIO()
         doc.save(output_stream)
         doc.close()
-        output_stream.seek(0)
+        output_stream.seek( 1)
         return output_stream.read()
 
     @staticmethod

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173148131419Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T173148996860Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 27

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -54,7 +54,7 @@
         output_stream = BytesIO()
         doc.save(output_stream)
         doc.close()
-        output_stream.seek(0)
+        output_stream.seek( -1)
         return output_stream.read()
 
     @staticmethod

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: negative seek value -1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 28

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -81,7 +81,7 @@
 
         output_stream = BytesIO()
         writer.write(output_stream)
-        output_stream.seek(0)
+        output_stream.seek( 1)
         return output_stream.read()
 
     def add_watermark(

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 29

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -81,7 +81,7 @@
 
         output_stream = BytesIO()
         writer.write(output_stream)
-        output_stream.seek(0)
+        output_stream.seek( -1)
         return output_stream.read()
 
     def add_watermark(

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: negative seek value -1

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 30

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -133,7 +133,7 @@
         """
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),
-            length=32,
+            length= 33,
             salt=b"try_and_break_me",
             iterations=200_000,
             backend=default_backend(),

.........FF...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: Fernet key must be 32 url-safe base64-encoded bytes.

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: Fernet key must be 32 url-safe base64-encoded bytes.

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

2 failed, 12 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 31

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -133,7 +133,7 @@
         """
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),
-            length=32,
+            length= 31,
             salt=b"try_and_break_me",
             iterations=200_000,
             backend=default_backend(),

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ea087d653d2b2e136: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 32

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -135,7 +135,7 @@
             algorithm=hashes.SHA256(),
             length=32,
             salt=b"try_and_break_me",
-            iterations=200_000,
+            iterations= 200001,
             backend=default_backend(),
         )
         return base64.urlsafe_b64encode(kdf.derive(password.encode()))

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: Failed to decrypt watermark

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 33

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -135,7 +135,7 @@
             algorithm=hashes.SHA256(),
             length=32,
             salt=b"try_and_break_me",
-            iterations=200_000,
+            iterations= 199999,
             backend=default_backend(),
         )
         return base64.urlsafe_b64encode(kdf.derive(password.encode()))

...F......F...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: Failed to decrypt watermark

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

2 failed, 12 passed, 22 warnings in 20.88s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 34

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -166,5 +166,5 @@
             else:
                 extracted_data.append(None)  # No watermark found on this page
 
-        return str(extracted_data[0])
+        return str(extracted_data[ 1])

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 35

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -166,5 +166,5 @@
             else:
                 extracted_data.append(None)  # No watermark found on this page
 
-        return str(extracted_data[0])
+        return str(extracted_data[ -1])

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033049774370Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033050675564Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -23,8 +23,6 @@
 
 class StructuralOverlay(WatermarkingMethod):
     name = "overlay-watermark"
-
-    @staticmethod
     def get_usage() -> str:
         return "Method that overlays a visible watermark."

........F.....                                                           [100%]

================================== FAILURES ===================================

_____________________ test_get_watermarking_methods_route _____________________



client = <FlaskClient <Flask 'server'>>



    def test_get_watermarking_methods_route(client):

        """Test get watermarking methods endpoint."""

>       resp = client.get("/api/get-watermarking-methods")

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:297: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.get("/api/get-watermarking-methods")

    def get_watermarking_methods():

        methods = []

    

        for m in WMUtils.METHODS:

            methods.append(

>               {"name": m, "description": WMUtils.get_method(m).get_usage()}

                                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

            )

E           TypeError: StructuralOverlay.get_usage() takes 0 positional arguments but 1 was given



server.py:1137: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_watermarking_methods_route - TypeError: ...

1 failed, 13 passed, 22 warnings in 21.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -27,8 +27,6 @@
     @staticmethod
     def get_usage() -> str:
         return "Method that overlays a visible watermark."
-
-    @staticmethod
     def visible_watermark(pdf_bytes: bytes, visible_watermark: str):
         """
         Applies a visible watermark to each page of a PDF (in-memory).

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044040709555Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T044041710215Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -56,8 +56,6 @@
         doc.close()
         output_stream.seek(0)
         return output_stream.read()
-
-    @staticmethod
     def structural_watermark(pdf_bytes: bytes, hidden_data: str) -> bytes:
         """
         Adds a hidden structural watermark to the PDF (in-memory).

.........F....                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: StructuralOverlay.structural_watermark() takes 2 positional arguments but 3 were given

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

1 failed, 13 passed, 22 warnings in 20.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 3

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -125,8 +125,6 @@
         position: str | None = None,
     ) -> bool:
         return True
-
-    @staticmethod
     def derive_fernet_key(password: str) -> bytes:
         """
         Derive a Fernet-compatible key from a string password using PBKDF2.

.........FF...                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

        assert resp.status_code == 201

        assert resp.is_json

        #check types

        assert isinstance(data.get("id"), int)

        assert isinstance(data.get("documentid"), int)

        assert isinstance(data.get("link"), str)

        assert isinstance(data.get("intended_for"), str)

        assert isinstance(data.get("method"), str)

        assert isinstance(data.get("position"), str)

        assert isinstance(data.get("filename"), str)

        assert isinstance(data.get("size"), int)

        #check values

        assert data.get("documentid") == parameters["id"]

        assert data.get("intended_for") == parameters["intended_for"]

        assert data.get("method") == parameters["method"]

        assert data.get("position") == parameters["position"]

    

        #Tests with wrong parameters

        #Test with exact same call: should return database insertion error (Non unique entry)

        resp = client.post("/api/create-watermark", json=parameters)

        assert resp.status_code == 503

        #Non existant method

        resp = client.post("/api/create-watermark", json={"method": "watermarkmethod", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Non existant document

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 8})

        assert resp.status_code == 404

        #Missing id

        resp = client.post("/api/create-watermark", json={"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse"})

        assert resp.status_code == 400

        #Missing method

        resp = client.post("/api/create-watermark", json={"position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1})

        assert resp.status_code == 400

        #Missing position: no issue if method ignores

        # (NB: must change intended_for or secret etc! Else integrity error.)

        resp = client.post("/api/create-watermark", json={"method": "overlay-watermark", "key": "key",

                        "secret": "secret", "intended_for":"John", "id": 1})

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:363: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1097 Integrity error during version insert for document 1: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b' for key 'uq_Versions_link'")

[SQL: 

                        INSERT INTO Versions (documentid, link, intended_for,

                                            secret, method, position, path)

                        VALUES (%(documentid)s, %(link)s, %(intended_for)s, %(secret)s,

                               %(method)s, %(position)s, %(path)s)

                    ]

[parameters: {'documentid': 1, 'link': 'b844de8060c148285cdf347927f723d01bd81b35ea64b58b7494157eba1a274b', 'intended_for': 'Mickey Mouse', 'secret': 'secret', 'method': 'robust-xmp', 'position': 'metadata-only', 'path': 'C:\\Users\\franc\\Documents\\GitHub\\softsec-tatou\\server\\src\\storage\\files\\username\\watermarks\\My File__Mickey_Mouse.pdf'}]

(Background on this error at: https://sqlalche.me/e/20/gkpj)

ERROR    server:server.py:1007 Watermark applicability check failed for document 1: "Unknown watermarking method: 'watermarkmethod'. Known: ['overlay-watermark', 'robust-xmp', 'signed-annots']"

WARNING  server:server.py:972 Document not found or access denied for watermarking id=8

WARNING  server:server.py:934 Missing document id in request

WARNING  server:server.py:948 Missing required fields for watermarking: {'id': 1, 'intended_for': 'Mickey Mouse', 'key': 'key', 'position': 'metadata-only', 'secret': 'secret'}

ERROR    server:server.py:1034 Watermarking failed for document 1 using method overlay-watermark: StructuralOverlay.derive_fernet_key() takes 1 positional argument but 2 were given

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: StructuralOverlay.derive_fernet_key() takes 1 positional argument but 2 were given

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

2 failed, 12 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 0

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -37,7 +37,7 @@
         input_stream = BytesIO(pdf_bytes)
         doc = fitz.open(stream=input_stream, filetype="pdf")
 
-        for page in doc:
+        for page in []:
             page.insert_text(
                 (72, 72),  # Top-left corner (x, y)
                 visible_watermark,

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 1

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -73,7 +73,7 @@
         # Obfuscated name makes it less obvious than "/Watermark"
         obfuscated_key = NameObject("/XObjD5fA2e1")
 
-        for page in reader.pages:
+        for page in []:
             piece_info = page.get("/PieceInfo") or DictionaryObject()
             piece_info.update({obfuscated_key: create_string_object(hidden_data)})
             page[NameObject("/PieceInfo")] = piece_info

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ZeroIterationForLoop, occurrence: 2

--- mutation diff ---
--- astructural_and_overlay_watermark.py
+++ bstructural_and_overlay_watermark.py
@@ -147,7 +147,7 @@
 
         obfuscated_key = NameObject("/XObjD5fA2e1")
 
-        for page in reader.pages:
+        for page in []:
             # Check for our custom structural watermark
             watermark_obj = page.get("/PieceInfo")
             if watermark_obj and obfuscated_key in watermark_obj:

..........F...                                                           [100%]

================================== FAILURES ===================================

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

            assert upload_resp.status_code == 201

            assert upload_resp_data.get("id") == 2

        #Test the route

    

        parameters = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password", "id": 2}

        parameters_no_id = {"method": "overlay-watermark", "position": "metadata-only", "key": "strong-password"}

        resp = client.post("/api/read-watermark", json=parameters)

        #resp = client.post("/api/read-watermark/2", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 52 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:400: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1226 Error when attempting to read watermark for document 2: list index out of range

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_read_watermark_route - assert 400 == 201

1 failed, 13 passed, 22 warnings in 19.92s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt - nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223048604903Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223049476782Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eac387b5a3c34522f: unsupported operand type(s) for -: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce - ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041426999989Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T041428107054Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8805f6134a7561df: unsupported operand type(s) for -: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 21.72s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT - 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.08s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start - fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE - 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE - 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Sub, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE - 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt * nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: can't multiply sequence by non-int of type 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7fd52744e3419f16: can't multiply sequence by non-int of type 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.48s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce * ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: can't multiply sequence by non-int of type 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0fbef19afb8627f8: can't multiply sequence by non-int of type 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT * 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start * fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE * 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE * 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.83s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mul, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE * 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4dc8ba2fbb522689: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.57s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt / nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for /: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e9e096094e6dcd9a6: unsupported operand type(s) for /: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce / ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for /: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4bd782c14bb5c0c3: unsupported operand type(s) for /: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT / 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start / fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231951417244Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231952324648Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e27ba331d4dbb6e4e: slice indices must be integers or None or have an __index__ method

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE / 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE / 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053615318685Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T053616255914Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Div, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE / 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 20.79s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt // nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for //: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8aaf85105f62c1e0: unsupported operand type(s) for //: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 21.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce // ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195116582996Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195117550596Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1d859372ab3b5980: unsupported operand type(s) for //: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.81s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT // 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start // fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE // 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.65s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE // 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161122501411Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161123420482Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_FloorDiv, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE // 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184740043224Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184740930619Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.72s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt % nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: not all arguments converted during bytes formatting

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614edac11e98771627a3: not all arguments converted during bytes formatting

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 22.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce % ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: not all arguments converted during bytes formatting

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e97d51592ecbaefc7: not all arguments converted during bytes formatting

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.82s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT % 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start % fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T145402660130Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T145403620228Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE % 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE % 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Mod, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE % 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143616275871Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143617226005Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt ** nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ** or pow(): 'bytes' and 'bytes'

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0559021003cb826a: unsupported operand type(s) for ** or pow(): 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce ** ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ** or pow(): 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed2865a25c9b7e3a0: unsupported operand type(s) for ** or pow(): 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT ** 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.75s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start ** fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033624016076Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T033624935082Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE ** 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.47s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE ** 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_Pow, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE ** 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt >> nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144808790238Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T144809651889Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e0fceabc392757d97: unsupported operand type(s) for >>: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.40s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce >> ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for >>: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7d86f984101c651c: unsupported operand type(s) for >>: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT >> 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.36s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start >> fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.93s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE >> 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE >> 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_RShift, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE >> 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt << nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for <<: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e737ca40f570f913b: unsupported operand type(s) for <<: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce << ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224142893573Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T224143827916Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e631d3f23fe02c35a: unsupported operand type(s) for <<: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT << 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142619014381Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142619959892Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start << fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE << 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE << 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_LShift, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE << 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.84s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt | nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for |: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1d85f68db13879f0: unsupported operand type(s) for |: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce | ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.FFFFF.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150309907351Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150310812868Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1cd3029cf3880900: unsupported operand type(s) for |: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

10 failed, 4 passed, 22 warnings in 19.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT | 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161326634077Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T161327530118Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start | fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE | 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195711550434Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195712586322Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE | 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitOr, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE | 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e9147dbafe6e08dc8: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.05s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt & nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for &: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e20138fae48b28d69: unsupported operand type(s) for &: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce & ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021630905464Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021631883424Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed7c69aac3c101712: unsupported operand type(s) for &: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.34s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT & 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233656057867Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233657022080Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start & fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1c0ba4e5e4424399: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.64s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE & 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE & 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitAnd, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE & 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt ^ nonce + ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ^: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e9a62a7f6ca303f9b: unsupported operand type(s) for ^: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -271,7 +271,7 @@
         salt = base64.b64decode(payload["salt"])
 
         # Combine salt, nonce, and ciphertext
-        encrypted = salt + nonce + ciphertext
+        encrypted = salt + nonce ^ ciphertext
         return base64.b64encode(encrypted).decode("ascii")
 
     def _decrypt_payload(self, key: bytes) -> dict[str, Any]:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: unsupported operand type(s) for ^: 'bytes' and 'bytes'

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eabcbc53c998835f3: unsupported operand type(s) for ^: 'bytes' and 'bytes'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT ^ 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -327,7 +327,7 @@
 
         for i in range(self._FRAGMENT_COUNT):
             start = i * fragment_size
-            end = min(start + fragment_size, len(payload_bytes))
+            end = min(start ^ fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051934499996Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T051935689928Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 21.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE ^ 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.89s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE ^ 12]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190033818352Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190034787173Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Add_BitXor, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE ^ 12 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.66s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_Add, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i + fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Sub, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i - fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025435444547Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T025436301565Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.43s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Div, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i / fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e103c8e8798d50cae: slice indices must be integers or None or have an __index__ method

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.81s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_FloorDiv, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i // fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Mod, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i % fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_Mul_Pow, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i ** fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193530092938Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193531063812Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_RShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i >> fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_LShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i << fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.27s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitOr, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i | fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitAnd, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i & fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_Mul_BitXor, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -326,7 +326,7 @@
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):
-            start = i * fragment_size
+            start = i ^ fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]
             fragments.append(fragment)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.23s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_FloorDiv_Add, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) + self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043850965984Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T043852312731Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 21.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_FloorDiv_Sub, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) - self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee1a58cffdb67ca8e: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_FloorDiv_Mul, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) * self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.99s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_FloorDiv_Div, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) / self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172842105352Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172842947741Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e1164fbddef871431: slice indices must be integers or None or have an __index__ method

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_FloorDiv_Mod, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) % self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_FloorDiv_Pow, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) ** self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_FloorDiv_RShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) >> self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_FloorDiv_LShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) << self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_FloorDiv_BitOr, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) | self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182127770815Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182128732254Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_FloorDiv_BitAnd, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) & self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.06s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_FloorDiv_BitXor, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) ^ self._FRAGMENT_COUNT + 1
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182826916664Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T182827938289Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.79s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str + None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.86s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str + None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.36s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str + None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T194959152388Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195000103798Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str + None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Add, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str + None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str - None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021951094712Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T021951963445Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e33b8dd220de31be0: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str - None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152413233632Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152414218536Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str - None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.66s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str - None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225751910472Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225752782835Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Sub, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str - None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str * None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045356838813Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045357752369Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.77s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str * None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str * None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str * None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.39s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mul, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str * None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e35f4101da74eb2b2: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str / None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str / None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str / None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.50s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str / None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210758269174Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210759370832Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.63s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Div, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str / None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.44s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str // None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192146931843Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T192147914935Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143448995152Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T143450032175Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

ERROR    server:rmap_handler.py:245 Failed to add source PDF to database: No users exist to own RMAP base document; create a user first

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 20.53s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str // None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 19.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str // None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str // None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_FloorDiv, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str // None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str % None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.99s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str % None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str % None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee944917938a2b5a3: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str % None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Mod, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str % None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.16s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ** None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ** None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str ** None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195445995183Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T195446911061Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.00s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str ** None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5df6ffb202ca553b: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_Pow, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str ** None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str >> None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.49s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str >> None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str >> None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013918001313Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T013919005055Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str >> None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.73s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_RShift, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str >> None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225834068124Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225835062047Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str << None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.48s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.38s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str << None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str << None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e2859b9ef07aed531: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.00s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str << None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_LShift, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str << None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee408fd5d4bc09e7b: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str & None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.90s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str & None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str & None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201558050773Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T201559027471Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.73s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str & None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitAnd, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str & None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -97,7 +97,7 @@
         pdf: PdfSource,
         secret: str,
         key: str,
-        intended_for: str | None = None,
+        intended_for: str ^ None = None,
         position: str | None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003820150735Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003821059978Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.42s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -98,7 +98,7 @@
         secret: str,
         key: str,
         intended_for: str | None = None,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bytes:
         """Add a robust watermark to the PDF.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -191,7 +191,7 @@
     def is_watermark_applicable(
         self,
         pdf: PdfSource,
-        position: str | None = None,
+        position: str ^ None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223501094487Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T223501902627Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.52s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -347,7 +347,7 @@
                 # If we can't add annotations, skip fragments
                 continue
 
-    def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
+    def _extract_from_xmp(self, doc: fitz.Document) -> str ^ None:
         """Extract watermark from XMP metadata (document info implementation)."""
         try:
             metadata = doc.metadata

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142744708116Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T142745748619Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.35s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -372,7 +372,7 @@
             pass
         return None
 
-    def _extract_from_document_info(self, doc: fitz.Document) -> str | None:
+    def _extract_from_document_info(self, doc: fitz.Document) -> str ^ None:
         """Extract watermark from document info dictionary."""
         try:
             metadata = doc.metadata

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceBinaryOperator_BitOr_BitXor, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -387,7 +387,7 @@
             pass
         return None
 
-    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str | None:
+    def _reconstruct_from_fragments(self, doc: fitz.Document) -> str ^ None:
         """Reconstruct watermark from distributed fragments."""
         try:
             fragments = {}

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if doc.page_count != 0:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.94s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_NotEq, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    and payload.get("version") != self._VERSION
                 ):
                     return payload["secret"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.54s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if doc.page_count < 0:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154305937393Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T154306819675Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Lt, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    and payload.get("version") < self._VERSION
                 ):
                     return payload["secret"]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183219605615Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T183220604551Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.01s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if doc.page_count <= 0:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001259686283Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T001300613736Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_LtE, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    and payload.get("version") <= self._VERSION
                 ):
                     return payload["secret"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.96s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if doc.page_count > 0:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.43s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_Gt, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    and payload.get("version") > self._VERSION
                 ):
                     return payload["secret"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if doc.page_count >= 0:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184658199962Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T184659232415Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_GtE, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    and payload.get("version") >= self._VERSION
                 ):
                     return payload["secret"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Eq_Is, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    and payload.get("version") is self._VERSION
                 ):
                     return payload["secret"]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164007454376Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T164008417179Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.30s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Eq_IsNot, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    and payload.get("version") is not self._VERSION
                 ):
                     return payload["secret"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.64s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Eq, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if position == "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Lt, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if position < "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614efd6005ce38ce8f9b: '<' not supported between instances of 'NoneType' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.14s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_LtE, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if position <= "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ee0ff58a11b5666ba: '<=' not supported between instances of 'NoneType' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_Gt, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if position > "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec44886ac674bad01: '>' not supported between instances of 'NoneType' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 21.29s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_NotEq_GtE, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if position >= "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

.............F                                                           [100%]

================================== FAILURES ===================================

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614eccdc943d13ac221e: '>=' not supported between instances of 'NoneType' and 'str'

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

1 failed, 13 passed, 22 warnings in 20.57s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_Is, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if position is "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



robust_xmp_watermark.py:167

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\robust_xmp_watermark.py:167: SyntaxWarning: "is" with 'str' literal. Did you mean "=="?

    if position is "metadata-only":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 21.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_NotEq_IsNot, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if position is not "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



robust_xmp_watermark.py:167

  C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\robust_xmp_watermark.py:167: SyntaxWarning: "is not" with 'str' literal. Did you mean "!="?

    if position is not "metadata-only":



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 23 warnings in 20.17s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_Eq, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if doc.page_count == 0:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.95s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_NotEq, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if doc.page_count != 0:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.58s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_Lt, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if doc.page_count < 0:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e77ed73ca73b6ae81: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 20.87s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_Gt_LtE, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if doc.page_count <= 0:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_Gt_GtE, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if doc.page_count >= 0:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef742719bc8ac71a1: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 21.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Eq, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if len(parts) == 3:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e156e53e53f233137: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.69s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Eq, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if len(parts) == 2:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Eq, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if len(fragments) == self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Eq, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) == self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T204059273083Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T204100189560Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_NotEq, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if len(parts) != 3:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042251103301Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042252531436Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 22.28s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_NotEq, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if len(parts) != 2:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034304344922Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T034305197286Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 20.35s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_NotEq, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if len(fragments) != self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233334576825Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233335488579Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.38s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_NotEq, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) != self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031334690138Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T031335794990Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Lt, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if len(parts) < 3:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.33s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Lt, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if len(parts) < 2:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030354793817Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T030355674521Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Lt, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if len(fragments) < self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203243578700Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T203244499255Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.51s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Lt, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) < self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e7e3fe419b3ae864b: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.70s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_LtE, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if len(parts) <= 3:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.87s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_LtE, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if len(parts) <= 2:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

...F.....FFF..                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

4 failed, 10 passed, 22 warnings in 19.66s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_LtE, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if len(fragments) <= self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_LtE, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) <= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Gt, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if len(parts) > 3:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.76s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Gt, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if len(parts) > 2:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024731056978Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T024731989348Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Gt, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if len(fragments) > self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Gt, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) > self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042735139303Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042736554582Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 21.20s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_Is, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if len(fragments) is self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.08s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_Is, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) is self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190137217751Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T190138179484Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.98s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceComparisonOperator_GtE_IsNot, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if len(fragments) is not self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

...F.....FFF.F                                                           [100%]

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceComparisonOperator_GtE_IsNot, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) is not self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -111,7 +111,7 @@
         Returns:
             Watermarked PDF as bytes
         """
-        if not HAS_PYMUPDF:
+        if  HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: PyMuPDF is required for robust XMP watermarking

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef13abb2374fd2376: PyMuPDF is required for robust XMP watermarking

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.97s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -115,7 +115,7 @@
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)
-        if not secret.strip():
+        if  secret.strip():
             raise ValueError("Secret must be a non-empty string")
         if not key.strip():
             raise ValueError("Key must be a non-empty string")

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: Secret must be a non-empty string

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ec1f8ac5d74a40075: Secret must be a non-empty string

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 19.90s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -117,7 +117,7 @@
         data = load_pdf_bytes(pdf)
         if not secret.strip():
             raise ValueError("Secret must be a non-empty string")
-        if not key.strip():
+        if  key.strip():
             raise ValueError("Key must be a non-empty string")
 
         # Generate watermark components

...F.....FFF.F                                                           [100%]

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -194,7 +194,7 @@
         position: str | None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
-        if not HAS_PYMUPDF:
+        if  HAS_PYMUPDF:
             return False
 
         try:

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.17s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -219,7 +219,7 @@
             SecretNotFoundError: If no watermark is found
             InvalidKeyError: If key is incorrect
         """
-        if not HAS_PYMUPDF:
+        if  HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225138835238Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T225139653477Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.60s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -223,7 +223,7 @@
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)
-        if not key.strip():
+        if  key.strip():
             raise ValueError("Key must be a non-empty string")
 
         doc = fitz.open(stream=data, filetype="pdf")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -232,7 +232,7 @@
             # Try to read from document info first (more reliable for full payload)
             encrypted_payload = self._extract_from_document_info(doc)
 
-            if not encrypted_payload:
+            if  encrypted_payload:
                 # Fallback to XMP metadata
                 encrypted_payload = self._extract_from_xmp(doc)

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233113722841Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T233114706266Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 7

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -236,7 +236,7 @@
                 # Fallback to XMP metadata
                 encrypted_payload = self._extract_from_xmp(doc)
 
-            if not encrypted_payload:
+            if  encrypted_payload:
                 # Last resort: try to reconstruct from fragments
                 encrypted_payload = self._reconstruct_from_fragments(doc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.64s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceUnaryOperator_Delete_Not, occurrence: 8

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -240,7 +240,7 @@
                 # Last resort: try to reconstruct from fragments
                 encrypted_payload = self._reconstruct_from_fragments(doc)
 
-            if not encrypted_payload:
+            if  encrypted_payload:
                 raise SecretNotFoundError("No robust XMP watermark found in PDF")
 
             # Decrypt and extract secret

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.91s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -111,7 +111,7 @@
         Returns:
             Watermarked PDF as bytes
         """
-        if not HAS_PYMUPDF:
+        if not not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050241945004Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050242937178Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ebb4f41fc5fe6c0bd: PyMuPDF is required for robust XMP watermarking

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 20.69s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -115,7 +115,7 @@
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)
-        if not secret.strip():
+        if not not secret.strip():
             raise ValueError("Secret must be a non-empty string")
         if not key.strip():
             raise ValueError("Key must be a non-empty string")

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1034 Watermarking failed for document 1 using method robust-xmp: Secret must be a non-empty string

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e8953295ae1590ad2: Secret must be a non-empty string

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -117,7 +117,7 @@
         data = load_pdf_bytes(pdf)
         if not secret.strip():
             raise ValueError("Secret must be a non-empty string")
-        if not key.strip():
+        if not not key.strip():
             raise ValueError("Key must be a non-empty string")
 
         # Generate watermark components

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050428348952Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T050429250395Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef425e4b052315b45: Key must be a non-empty string

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.74s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if not doc.page_count == 0:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -164,7 +164,7 @@
         self._embed_in_document_info(doc, encrypted_payload, watermark_id)
 
         # Add distributed fragments (unless disabled or not possible)
-        if position != "metadata-only":
+        if not position != "metadata-only":
             self._embed_fragments(doc, encrypted_payload, watermark_id, derived_key)
 
         # Return the watermarked PDF

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -171,7 +171,7 @@
         try:
             result = doc.write()
         except ValueError as e:
-            if "cannot save with zero pages" in str(e):
+            if not "cannot save with zero pages" in str(e):
                 # Create a new document with proper structure
                 new_doc = fitz.open()
                 new_doc.new_page()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.20s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -194,7 +194,7 @@
         position: str | None = None,
     ) -> bool:
         """Check if watermarking is applicable."""
-        if not HAS_PYMUPDF:
+        if not not HAS_PYMUPDF:
             return False
 
         try:

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235520279228Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T235521156882Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 7

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -219,7 +219,7 @@
             SecretNotFoundError: If no watermark is found
             InvalidKeyError: If key is incorrect
         """
-        if not HAS_PYMUPDF:
+        if not not HAS_PYMUPDF:
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 8

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -223,7 +223,7 @@
             raise WatermarkingError("PyMuPDF is required for robust XMP watermarking")
 
         data = load_pdf_bytes(pdf)
-        if not key.strip():
+        if not not key.strip():
             raise ValueError("Key must be a non-empty string")
 
         doc = fitz.open(stream=data, filetype="pdf")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.58s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 9

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -232,7 +232,7 @@
             # Try to read from document info first (more reliable for full payload)
             encrypted_payload = self._extract_from_document_info(doc)
 
-            if not encrypted_payload:
+            if not not encrypted_payload:
                 # Fallback to XMP metadata
                 encrypted_payload = self._extract_from_xmp(doc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.66s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 10

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -236,7 +236,7 @@
                 # Fallback to XMP metadata
                 encrypted_payload = self._extract_from_xmp(doc)
 
-            if not encrypted_payload:
+            if not not encrypted_payload:
                 # Last resort: try to reconstruct from fragments
                 encrypted_payload = self._reconstruct_from_fragments(doc)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 11

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -240,7 +240,7 @@
                 # Last resort: try to reconstruct from fragments
                 encrypted_payload = self._reconstruct_from_fragments(doc)
 
-            if not encrypted_payload:
+            if not not encrypted_payload:
                 raise SecretNotFoundError("No robust XMP watermark found in PDF")
 
             # Decrypt and extract secret

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 12

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if not doc.page_count > 0:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 13

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -358,7 +358,7 @@
             producer = metadata.get("producer", "")
 
             # Check if this looks like our watermark format
-            if "watermark" in keywords and "Tatou Security" in producer:
+            if not "watermark" in keywords and "Tatou Security" in producer:
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210205307708Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T210206354310Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 21.62s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 14

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -360,7 +360,7 @@
             # Check if this looks like our watermark format
             if "watermark" in keywords and "Tatou Security" in producer:
                 # Try subject first (partial payload with watermark ID)
-                if "tw-" in subject:
+                if not "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
                     if len(parts) >= 3:
                         return parts[2]  # The encrypted payload part

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 15

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if not len(parts) >= 3:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 16

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -366,7 +366,7 @@
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)
-                if title:
+                if not title:
                     return title
         except Exception:  # nosec B110  # noqa: S110
             pass

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.74s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 17

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -380,7 +380,7 @@
             title = metadata.get("title", "")
 
             # Check if this looks like our watermark format
-            if creator.startswith("Tatou-") and title:
+            if not creator.startswith("Tatou-") and title:
                 # The full payload is stored in title
                 return title
         except Exception:  # nosec B110  # noqa: S110

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ef4ead2b97230dedf: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.84s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 18

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -402,7 +402,7 @@
                         content = annot.info.get("content", "")
                         author = annot.info.get("title", "")  # Sometimes title is used
 
-                        if author.startswith("tw-") and content:
+                        if not author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
                             if len(parts) >= 2:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 19

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if not len(parts) >= 2:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.02s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/AddNot, occurrence: 20

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -415,7 +415,7 @@
                         continue
 
             # Reconstruct payload from fragments
-            if len(fragments) >= self._MIN_FRAGMENTS:
+            if not len(fragments) >= self._MIN_FRAGMENTS:
                 reconstructed = b""
                 for i in sorted(fragments.keys()):
                     reconstructed += fragments[i]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.45s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 21

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if not len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150107193678Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150108051507Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.30s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/AddNot, occurrence: 22

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -446,7 +446,7 @@
                 payload = json.loads(payload_json.decode("utf-8"))
 
                 # Validate payload structure
-                if (
+                if not (
                     isinstance(payload, dict)
                     and payload.get("version") == self._VERSION
                 ):

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153142599886Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T153143447816Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.18s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -50,7 +50,7 @@
 try:
     import fitz  # PyMuPDF
 
-    HAS_PYMUPDF = True
+    HAS_PYMUPDF = False
 except ImportError:
     HAS_PYMUPDF = False

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 19.95s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceTrueWithFalse, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -201,7 +201,7 @@
             data = load_pdf_bytes(pdf)
             doc = fitz.open(stream=data, filetype="pdf")
             doc.close()
-            return True
+            return False
         except Exception:
             return False

.........F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 400 == 201

E        +  where 400 = <WrapperTestResponse 47 bytes [400 BAD REQUEST]>.status_code



..\test\test_api.py:322: AssertionError

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_watermark_route - assert 400 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

2 failed, 12 passed, 22 warnings in 20.63s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceFalseWithTrue, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -52,7 +52,7 @@
 
     HAS_PYMUPDF = True
 except ImportError:
-    HAS_PYMUPDF = False
+    HAS_PYMUPDF = True
 
 
 class RobustXmpWatermark(WatermarkingMethod):

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045745929789Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T045746829703Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.91s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -195,7 +195,7 @@
     ) -> bool:
         """Check if watermarking is applicable."""
         if not HAS_PYMUPDF:
-            return False
+            return True
 
         try:
             data = load_pdf_bytes(pdf)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceFalseWithTrue, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -203,7 +203,7 @@
             doc.close()
             return True
         except Exception:
-            return False
+            return True
 
     def read_secret(self, pdf: PdfSource, key: str) -> str:
         """Extract and decrypt the watermark secret.

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.68s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceAndWithOr, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -358,7 +358,7 @@
             producer = metadata.get("producer", "")
 
             # Check if this looks like our watermark format
-            if "watermark" in keywords and "Tatou Security" in producer:
+            if "watermark" in keywords or "Tatou Security" in producer:
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceAndWithOr, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -380,7 +380,7 @@
             title = metadata.get("title", "")
 
             # Check if this looks like our watermark format
-            if creator.startswith("Tatou-") and title:
+            if creator.startswith("Tatou-") or title:
                 # The full payload is stored in title
                 return title
         except Exception:  # nosec B110  # noqa: S110

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceAndWithOr, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -402,7 +402,7 @@
                         content = annot.info.get("content", "")
                         author = annot.info.get("title", "")  # Sometimes title is used
 
-                        if author.startswith("tw-") and content:
+                        if author.startswith("tw-") or content:
                             # Extract fragment index
                             parts = author.split("-")
                             if len(parts) >= 2:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceAndWithOr, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -448,7 +448,7 @@
                 # Validate payload structure
                 if (
                     isinstance(payload, dict)
-                    and payload.get("version") == self._VERSION
+                    or payload.get("version") == self._VERSION
                 ):
                     return payload["secret"]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.10s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ReplaceContinueWithBreak, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -345,7 +345,7 @@
 
             except Exception:  # nosec B112  # noqa: S112
                 # If we can't add annotations, skip fragments
-                continue
+                break
 
     def _extract_from_xmp(self, doc: fitz.Document) -> str | None:
         """Extract watermark from XMP metadata (document info implementation)."""

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.25s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceContinueWithBreak, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -410,7 +410,7 @@
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)
                                 except (ValueError, TypeError):
-                                    continue
+                                    break
                     except Exception:  # nosec B112  # noqa: S112
                         continue

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172922932799Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T172923860550Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.42s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ReplaceContinueWithBreak, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -412,7 +412,7 @@
                                 except (ValueError, TypeError):
                                     continue
                     except Exception:  # nosec B112  # noqa: S112
-                        continue
+                        break
 
             # Reconstruct payload from fragments
             if len(fragments) >= self._MIN_FRAGMENTS:

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000250470405Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000251385165Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.32s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -51,7 +51,7 @@
     import fitz  # PyMuPDF
 
     HAS_PYMUPDF = True
-except ImportError:
+except CosmicRayTestingException:
     HAS_PYMUPDF = False

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.82s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -149,7 +149,7 @@
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()
-                except RuntimeError:
+                except CosmicRayTestingException:
                     # PDF structure is too minimal, use metadata-only approach
                     position = "metadata-only"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.15s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -153,7 +153,7 @@
                     # PDF structure is too minimal, use metadata-only approach
                     position = "metadata-only"
 
-        except Exception:
+        except CosmicRayTestingException:
             # If there are any issues, fall back to metadata-only
             position = "metadata-only"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -170,7 +170,7 @@
         # Return the watermarked PDF
         try:
             result = doc.write()
-        except ValueError as e:
+        except CosmicRayTestingException as e:
             if "cannot save with zero pages" in str(e):
                 # Create a new document with proper structure
                 new_doc = fitz.open()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.01s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -202,7 +202,7 @@
             doc = fitz.open(stream=data, filetype="pdf")
             doc.close()
             return True
-        except Exception:
+        except CosmicRayTestingException:
             return False
 
     def read_secret(self, pdf: PdfSource, key: str) -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -343,7 +343,7 @@
                     # Add as form field or annotation
                     page.add_text_annot([0, 0], fragment_b64)
 
-            except Exception:  # nosec B112  # noqa: S112
+            except CosmicRayTestingException:  # nosec B112  # noqa: S112
                 # If we can't add annotations, skip fragments
                 continue

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -368,7 +368,7 @@
                 # Fallback to title (full payload)
                 if title:
                     return title
-        except Exception:  # nosec B110  # noqa: S110
+        except CosmicRayTestingException:  # nosec B110  # noqa: S110
             pass
         return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.97s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 7

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -383,7 +383,7 @@
             if creator.startswith("Tatou-") and title:
                 # The full payload is stored in title
                 return title
-        except Exception:  # nosec B110  # noqa: S110
+        except CosmicRayTestingException:  # nosec B110  # noqa: S110
             pass
         return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.61s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 8

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -409,7 +409,7 @@
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)
-                                except (ValueError, TypeError):
+                                except (CosmicRayTestingException, TypeError):
                                     continue
                     except Exception:  # nosec B112  # noqa: S112
                         continue

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 9

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -409,7 +409,7 @@
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)
-                                except (ValueError, TypeError):
+                                except (ValueError, CosmicRayTestingException):
                                     continue
                     except Exception:  # nosec B112  # noqa: S112
                         continue

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150208213043Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150209072715Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.27s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 10

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -411,7 +411,7 @@
                                     fragments[fragment_idx] = base64.b64decode(content)
                                 except (ValueError, TypeError):
                                     continue
-                    except Exception:  # nosec B112  # noqa: S112
+                    except CosmicRayTestingException:  # nosec B112  # noqa: S112
                         continue
 
             # Reconstruct payload from fragments

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193349526373Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T193350480730Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.06s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 11

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -421,7 +421,7 @@
                     reconstructed += fragments[i]
                 return reconstructed.decode("utf-8")
 
-        except Exception:  # nosec B110  # noqa: S110
+        except CosmicRayTestingException:  # nosec B110  # noqa: S110
             pass
         return None

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.09s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 12

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -455,7 +455,7 @@
             # If the above doesn't work, raise an error
             raise SecretNotFoundError("Invalid watermark format or corrupted data")
 
-        except InvalidKeyError:
+        except CosmicRayTestingException:
             raise
         except SecretNotFoundError:
             raise

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231243051365Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231244010512Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.34s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ExceptionReplacer, occurrence: 13

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -457,7 +457,7 @@
 
         except InvalidKeyError:
             raise
-        except SecretNotFoundError:
+        except CosmicRayTestingException:
             raise
         except Exception as e:
             msg = f"Failed to decrypt watermark with provided key: {e}"

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.21s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ExceptionReplacer, occurrence: 14

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -459,7 +459,7 @@
             raise
         except SecretNotFoundError:
             raise
-        except Exception as e:
+        except CosmicRayTestingException as e:
             msg = f"Failed to decrypt watermark with provided key: {e}"
             raise InvalidKeyError(msg) from e

.FFFFF.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150514077208Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T150514943875Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

9 failed, 5 passed, 22 warnings in 19.31s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -77,7 +77,7 @@
     # Constants for the watermarking scheme
     _XMP_NAMESPACE: Final[str] = "http://tatou.security/watermark/"
     _XMP_PREFIX: Final[str] = "tw"
-    _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
+    _FRAGMENT_COUNT: Final[int] = 4  # Number of fragments to distribute
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T032236094431Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T032237020836Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.56s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -77,7 +77,7 @@
     # Constants for the watermarking scheme
     _XMP_NAMESPACE: Final[str] = "http://tatou.security/watermark/"
     _XMP_PREFIX: Final[str] = "tw"
-    _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
+    _FRAGMENT_COUNT: Final[int] = 2  # Number of fragments to distribute
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.82s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -78,7 +78,7 @@
     _XMP_NAMESPACE: Final[str] = "http://tatou.security/watermark/"
     _XMP_PREFIX: Final[str] = "tw"
     _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
-    _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
+    _MIN_FRAGMENTS: Final[int] = 3  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
     _VERSION: Final[int] = 1  # Watermark format version

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185156896823Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T185157863007Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 19.88s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -78,7 +78,7 @@
     _XMP_NAMESPACE: Final[str] = "http://tatou.security/watermark/"
     _XMP_PREFIX: Final[str] = "tw"
     _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
-    _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
+    _MIN_FRAGMENTS: Final[int] = 1  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
     _VERSION: Final[int] = 1  # Watermark format version

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.75s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -79,7 +79,7 @@
     _XMP_PREFIX: Final[str] = "tw"
     _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
-    _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
+    _SALT_SIZE: Final[int] = 17  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
     _VERSION: Final[int] = 1  # Watermark format version

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 5

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -79,7 +79,7 @@
     _XMP_PREFIX: Final[str] = "tw"
     _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
-    _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
+    _SALT_SIZE: Final[int] = 15  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
     _VERSION: Final[int] = 1  # Watermark format version

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.26s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 6

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -80,7 +80,7 @@
     _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
-    _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
+    _KEY_ITERATIONS: Final[int] = 100001  # PBKDF2 iterations
     _VERSION: Final[int] = 1  # Watermark format version
 
     @staticmethod

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 7

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -80,7 +80,7 @@
     _FRAGMENT_COUNT: Final[int] = 3  # Number of fragments to distribute
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
-    _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
+    _KEY_ITERATIONS: Final[int] = 99999  # PBKDF2 iterations
     _VERSION: Final[int] = 1  # Watermark format version
 
     @staticmethod

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 8

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -81,7 +81,7 @@
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
-    _VERSION: Final[int] = 1  # Watermark format version
+    _VERSION: Final[int] = 2  # Watermark format version
 
     @staticmethod
     def get_usage() -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 19.98s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 9

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -81,7 +81,7 @@
     _MIN_FRAGMENTS: Final[int] = 2  # Minimum fragments needed for reconstruction
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
-    _VERSION: Final[int] = 1  # Watermark format version
+    _VERSION: Final[int] = 0  # Watermark format version
 
     @staticmethod
     def get_usage() -> str:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 10

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if doc.page_count == 1:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 11

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -145,7 +145,7 @@
 
         try:
             # Ensure the PDF has at least one page for fragment embedding
-            if doc.page_count == 0:
+            if doc.page_count == -1:
                 try:
                     # Try to add a blank page if PDF structure allows it
                     doc.new_page()

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T202708507953Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T202709524577Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.11s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 12

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -253,7 +253,7 @@
         """Derive encryption key from password and salt."""
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),
-            length=32,  # 256-bit key
+            length= 33,  # 256-bit key
             salt=salt,
             iterations=self._KEY_ITERATIONS,
         )

.FFFFFFF.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003921883936Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T003922766321Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614ed49cb199cfaaac72: AESGCM key must be 128, 192, or 256 bits.

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

11 failed, 3 passed, 22 warnings in 19.32s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 13

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -253,7 +253,7 @@
         """Derive encryption key from password and salt."""
         kdf = PBKDF2HMAC(
             algorithm=hashes.SHA256(),
-            length=32,  # 256-bit key
+            length= 31,  # 256-bit key
             salt=salt,
             iterations=self._KEY_ITERATIONS,
         )

.FFF.F.F.FFF.F                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231650073734Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T231651017229Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4f10fa456c7447ba: AESGCM key must be 128, 192, or 256 bits.

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

9 failed, 5 passed, 22 warnings in 19.47s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 14

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -262,7 +262,7 @@
     def _encrypt_payload(self, payload: dict[str, Any], key: bytes) -> str:
         """Encrypt payload using AES-GCM and include salt."""
         aesgcm = AESGCM(key)
-        nonce = secrets.token_bytes(12)  # 96-bit nonce for GCM
+        nonce = secrets.token_bytes( 13)  # 96-bit nonce for GCM
 
         payload_json = json.dumps(payload, separators=(",", ":")).encode("utf-8")
         ciphertext = aesgcm.encrypt(nonce, payload_json, None)

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000230391214Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T000231302207Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 19.46s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 15

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -262,7 +262,7 @@
     def _encrypt_payload(self, payload: dict[str, Any], key: bytes) -> str:
         """Encrypt payload using AES-GCM and include salt."""
         aesgcm = AESGCM(key)
-        nonce = secrets.token_bytes(12)  # 96-bit nonce for GCM
+        nonce = secrets.token_bytes( 11)  # 96-bit nonce for GCM
 
         payload_json = json.dumps(payload, separators=(",", ":")).encode("utf-8")
         ciphertext = aesgcm.encrypt(nonce, payload_json, None)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.64s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 16

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -291,7 +291,7 @@
         # Use a combination of standard and custom fields
         metadata.update(
             {
-                "subject": f"tw-{watermark_id[:8]}-{encrypted_payload[:100]}",
+                "subject": f"tw-{watermark_id[: 9]}-{encrypted_payload[:100]}",
                 "keywords": f"watermark,{watermark_id}",
                 "producer": f"Tatou Security Watermarker v{self._VERSION}",
             }

...F..........                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:228: in open

    request = self._request_from_builder_args(args, kwargs)

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:200: in _request_from_builder_args

    return builder.get_request()

           ^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:764: in get_request

    return cls(self.get_environ())

               ^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:688: in get_environ

    input_stream, content_length, boundary = stream_encode_multipart(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:130: in stream_encode_multipart

    write_binary(encoder.send_event(Data(data=chunk, more_data=True)))

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:81: in write_binary

    return stream.write(s)

           ^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

1 failed, 13 passed, 22 warnings in 21.23s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 17

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -291,7 +291,7 @@
         # Use a combination of standard and custom fields
         metadata.update(
             {
-                "subject": f"tw-{watermark_id[:8]}-{encrypted_payload[:100]}",
+                "subject": f"tw-{watermark_id[: 7]}-{encrypted_payload[:100]}",
                 "keywords": f"watermark,{watermark_id}",
                 "producer": f"Tatou Security Watermarker v{self._VERSION}",
             }

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.81s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 18

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -291,7 +291,7 @@
         # Use a combination of standard and custom fields
         metadata.update(
             {
-                "subject": f"tw-{watermark_id[:8]}-{encrypted_payload[:100]}",
+                "subject": f"tw-{watermark_id[:8]}-{encrypted_payload[: 101]}",
                 "keywords": f"watermark,{watermark_id}",
                 "producer": f"Tatou Security Watermarker v{self._VERSION}",
             }

...F.....FFF.F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 500 == 201

E            +  where 500 = <WrapperTestResponse 32 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:357 File save error: [Errno 28] No space left on device

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e5743e064cb1b7cd3: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

5 failed, 9 passed, 22 warnings in 19.92s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 19

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -291,7 +291,7 @@
         # Use a combination of standard and custom fields
         metadata.update(
             {
-                "subject": f"tw-{watermark_id[:8]}-{encrypted_payload[:100]}",
+                "subject": f"tw-{watermark_id[:8]}-{encrypted_payload[: 99]}",
                 "keywords": f"watermark,{watermark_id}",
                 "producer": f"Tatou Security Watermarker v{self._VERSION}",
             }

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.55s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 20

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -306,7 +306,7 @@
         metadata = doc.metadata
         metadata.update(
             {
-                "creator": f"Tatou-{watermark_id[:8]}",  # Partial ID in creator
+                "creator": f"Tatou-{watermark_id[: 9]}",  # Partial ID in creator
                 "title": encrypted_payload,  # Full payload in title (main storage)
             }
         )

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.07s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 21

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -306,7 +306,7 @@
         metadata = doc.metadata
         metadata.update(
             {
-                "creator": f"Tatou-{watermark_id[:8]}",  # Partial ID in creator
+                "creator": f"Tatou-{watermark_id[: 7]}",  # Partial ID in creator
                 "title": encrypted_payload,  # Full payload in title (main storage)
             }
         )

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152049766169Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T152050604613Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 22

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 2
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.50s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 23

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -322,7 +322,7 @@
         """Distribute watermark fragments across PDF objects."""
         # Split payload into fragments
         payload_bytes = encrypted_payload.encode("utf-8")
-        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
+        fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 0
         fragments = []
 
         for i in range(self._FRAGMENT_COUNT):

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 24

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if doc.page_count > 1:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.05s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 25

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -334,7 +334,7 @@
         # Add fragments to PDF as annotations or form fields
         for _i, fragment in enumerate(fragments):
             try:
-                if doc.page_count > 0:
+                if doc.page_count > -1:
                     page = doc.load_page(0)  # Use first page
 
                     # Create invisible annotation with fragment data

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.51s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 26

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -335,7 +335,7 @@
         for _i, fragment in enumerate(fragments):
             try:
                 if doc.page_count > 0:
-                    page = doc.load_page(0)  # Use first page
+                    page = doc.load_page( 1)  # Use first page
 
                     # Create invisible annotation with fragment data
                     fragment_b64 = base64.b64encode(fragment).decode("ascii")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.28s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 27

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -335,7 +335,7 @@
         for _i, fragment in enumerate(fragments):
             try:
                 if doc.page_count > 0:
-                    page = doc.load_page(0)  # Use first page
+                    page = doc.load_page( -1)  # Use first page
 
                     # Create invisible annotation with fragment data
                     fragment_b64 = base64.b64encode(fragment).decode("ascii")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 28

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -341,7 +341,7 @@
                     fragment_b64 = base64.b64encode(fragment).decode("ascii")
 
                     # Add as form field or annotation
-                    page.add_text_annot([0, 0], fragment_b64)
+                    page.add_text_annot([ 1, 0], fragment_b64)
 
             except Exception:  # nosec B112  # noqa: S112
                 # If we can't add annotations, skip fragments

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 29

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -341,7 +341,7 @@
                     fragment_b64 = base64.b64encode(fragment).decode("ascii")
 
                     # Add as form field or annotation
-                    page.add_text_annot([0, 0], fragment_b64)
+                    page.add_text_annot([ -1, 0], fragment_b64)
 
             except Exception:  # nosec B112  # noqa: S112
                 # If we can't add annotations, skip fragments

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 30

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -341,7 +341,7 @@
                     fragment_b64 = base64.b64encode(fragment).decode("ascii")
 
                     # Add as form field or annotation
-                    page.add_text_annot([0, 0], fragment_b64)
+                    page.add_text_annot([0, 1], fragment_b64)
 
             except Exception:  # nosec B112  # noqa: S112
                 # If we can't add annotations, skip fragments

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.37s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 31

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -341,7 +341,7 @@
                     fragment_b64 = base64.b64encode(fragment).decode("ascii")
 
                     # Add as form field or annotation
-                    page.add_text_annot([0, 0], fragment_b64)
+                    page.add_text_annot([0, -1], fragment_b64)
 
             except Exception:  # nosec B112  # noqa: S112
                 # If we can't add annotations, skip fragments

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.41s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 32

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -361,7 +361,7 @@
             if "watermark" in keywords and "Tatou Security" in producer:
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
-                    parts = subject.split("-", 2)  # tw-<id>-<payload>
+                    parts = subject.split("-", 3)  # tw-<id>-<payload>
                     if len(parts) >= 3:
                         return parts[2]  # The encrypted payload part

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 21.76s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 33

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -361,7 +361,7 @@
             if "watermark" in keywords and "Tatou Security" in producer:
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
-                    parts = subject.split("-", 2)  # tw-<id>-<payload>
+                    parts = subject.split("-", 1)  # tw-<id>-<payload>
                     if len(parts) >= 3:
                         return parts[2]  # The encrypted payload part

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 34

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if len(parts) >= 4:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.04s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 35

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -362,7 +362,7 @@
                 # Try subject first (partial payload with watermark ID)
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
-                    if len(parts) >= 3:
+                    if len(parts) >= 2:
                         return parts[2]  # The encrypted payload part
 
                 # Fallback to title (full payload)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 36

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -363,7 +363,7 @@
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
                     if len(parts) >= 3:
-                        return parts[2]  # The encrypted payload part
+                        return parts[ 3]  # The encrypted payload part
 
                 # Fallback to title (full payload)
                 if title:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.45s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 37

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -363,7 +363,7 @@
                 if "tw-" in subject:
                     parts = subject.split("-", 2)  # tw-<id>-<payload>
                     if len(parts) >= 3:
-                        return parts[2]  # The encrypted payload part
+                        return parts[ 1]  # The encrypted payload part
 
                 # Fallback to title (full payload)
                 if title:

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.12s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 38

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -393,7 +393,7 @@
             fragments = {}
 
             # Look for annotations with our fragment pattern
-            for page_num in range(min(doc.page_count, 5)):  # Check first few pages only
+            for page_num in range(min(doc.page_count, 6)):  # Check first few pages only
                 page = doc.load_page(page_num)
                 annots = page.annots()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.67s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 39

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -393,7 +393,7 @@
             fragments = {}
 
             # Look for annotations with our fragment pattern
-            for page_num in range(min(doc.page_count, 5)):  # Check first few pages only
+            for page_num in range(min(doc.page_count, 4)):  # Check first few pages only
                 page = doc.load_page(page_num)
                 annots = page.annots()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 40

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if len(parts) >= 3:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 41

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -405,7 +405,7 @@
                         if author.startswith("tw-") and content:
                             # Extract fragment index
                             parts = author.split("-")
-                            if len(parts) >= 2:
+                            if len(parts) >= 1:
                                 try:
                                     fragment_idx = int(parts[1])
                                     fragments[fragment_idx] = base64.b64decode(content)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.11s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 42

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -407,7 +407,7 @@
                             parts = author.split("-")
                             if len(parts) >= 2:
                                 try:
-                                    fragment_idx = int(parts[1])
+                                    fragment_idx = int(parts[ 2])
                                     fragments[fragment_idx] = base64.b64decode(content)
                                 except (ValueError, TypeError):
                                     continue

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.13s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 43

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -407,7 +407,7 @@
                             parts = author.split("-")
                             if len(parts) >= 2:
                                 try:
-                                    fragment_idx = int(parts[1])
+                                    fragment_idx = int(parts[ 0])
                                     fragments[fragment_idx] = base64.b64decode(content)
                                 except (ValueError, TypeError):
                                     continue

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042650566898Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T042651524344Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse streamed [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:844 DB delete error for doc id=2: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 503 == 200

10 failed, 4 passed, 22 warnings in 20.19s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 44

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE + 13:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.67s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 45

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -431,7 +431,7 @@
             # Try to extract salt from the encrypted payload
             encrypted_data = base64.b64decode(encrypted_payload)
 
-            if len(encrypted_data) >= self._SALT_SIZE + 12:
+            if len(encrypted_data) >= self._SALT_SIZE + 11:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]

.FFFFFFF.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 30 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:280 Database error in login: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004453166658Z__input.pdf user=1

__________________________ test_list_documents_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_documents_route(client):

        """Test document list endpoint."""

        resp = client.get("/api/list-documents")

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 55 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:198: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:432 Database error in list_documents for user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:504 Database error in list_versions: 1,1

________________________ test_list_all_versions_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_all_versions_route(client):

        """Test list all versions endpoint."""

        #call without parameters

        resp = client.get("/api/list-all-versions") #Fix list all versions on API.md!

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 503 == 200

E        +  where 503 = <WrapperTestResponse 54 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:255: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:551 Database error in list_all_versions for user=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:600 Database error in get_document: 1,1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:968 Database error fetching document (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251017T004454030773Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 503 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_documents_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_list_all_versions_route - assert 503 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

10 failed, 4 passed, 22 warnings in 19.24s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 46

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 13]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 22.71s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/NumberReplacer, occurrence: 47

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -434,7 +434,7 @@
             if len(encrypted_data) >= self._SALT_SIZE + 12:
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
-                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
+                nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 11]
                 ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
 
                 # Derive key using extracted salt

.FFF.F.F.FFF..                                                           [100%]

================================== FAILURES ===================================

___________________________ test_create_user_route ____________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_user_route(client):

        """Test user creation endpoint."""

        parameters = {

            "login": "username",

            "password": "password",

            "email": "user@email.se",

        }  # pragma: allowlist secret

        resp = client.post("/api/create-user", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 201  # Endpoint should exist

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

E       assert 503 == 201

E        +  where 503 = <WrapperTestResponse 27 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:73: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:236 Database error in create_user: (pymysql.err.OperationalError) (2013, 'Lost connection to MySQL server during query')

(Background on this error at: https://sqlalche.me/e/20/e3q8)

______________________________ test_login_route _______________________________



client = <FlaskClient <Flask 'server'>>



    def test_login_route(client):

        """Test login endpoint."""

        parameters = {

            "email": "user@email.se",

            "password": "password",

        }  # pragma: allowlist secret

        resp = client.post("/api/login", json=parameters)

        resp_data = resp.get_json()

    

        # Note: This will likely fail due to database connectivity in tests

        # but we can test that the endpoint exists and handles the request

        #basic tests

>       assert resp.status_code == 200

E       assert 401 == 200

E        +  where 401 = <WrapperTestResponse 32 bytes [401 UNAUTHORIZED]>.status_code



..\test\test_api.py:117: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:272 Failed login attempt for email: user@email.se

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

>           assert resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:152: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211755673802Z__input.pdf user=1

__________________________ test_list_versions_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_list_versions_route(client):

        """Test list versions endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/list-versions", query_string = parameters)

        #resp = client.get("/api/list-versions/1") #for test without parameters

        resp_data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:220: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:486 Document not found or access denied for id=1

___________________________ test_get_document_route ___________________________



client = <FlaskClient <Flask 'server'>>



    def test_get_document_route(client):

        """Test get document endpoint."""

        parameters = {"documentid":1}

        resp = client.get("/api/get-document", query_string=parameters)

        #resp = client.get("/api/get-document/1") #for test without parameters

    

        # Check Content-Type

        is_pdf = resp.headers.get('Content-Type') == 'application/pdf'

        # Check Content-Disposition for 'inline'

        content_disposition = resp.headers.get('Content-Disposition', '')

        is_inline = 'inline' in content_disposition.lower()

        #Oracle

>       assert is_pdf

E       assert False



..\test\test_api.py:282: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:610 Document not found or access denied for id=1

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 404 == 201

E        +  where 404 = <WrapperTestResponse 31 bytes [404 NOT FOUND]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:972 Document not found or access denied for watermarking id=1

__________________________ test_read_watermark_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_read_watermark_route(client):

        """Test read watermark endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #Upload watermarked file to the app

        with open(file_path, "rb") as f:

            data = {

                "file": (f, "watermarked.pdf"),

                "name": "Water File"

            }

            upload_resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

            upload_resp_data = upload_resp.get_json()

>           assert upload_resp.status_code == 201

E           assert 503 == 201

E            +  where 503 = <WrapperTestResponse 36 bytes [503 SERVICE UNAVAILABLE]>.status_code



..\test\test_api.py:389: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:393 Database error inserting document path=C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\20251016T211756691717Z__watermarked.pdf user=1

_________________________ test_delete_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_delete_document_route(client):

        document_id = {"id": 2}

        resp = client.delete("/api/delete-document", json=document_id)

        #resp = client.delete("/api/delete-document/2")

    

>       assert resp.status_code == 200

E       assert 404 == 200

E        +  where 404 = <WrapperTestResponse streamed [404 NOT FOUND]>.status_code



..\test\test_api.py:443: AssertionError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:850 Document not found or access denied for deletion id=2

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_create_user_route - assert 503 == 201

FAILED ..\test\test_api.py::test_login_route - assert 401 == 200

FAILED ..\test\test_api.py::test_upload_document_route - assert 503 == 201

FAILED ..\test\test_api.py::test_list_versions_route - assert 404 == 200

FAILED ..\test\test_api.py::test_get_document_route - assert False

FAILED ..\test\test_api.py::test_create_watermark_route - assert 404 == 201

FAILED ..\test\test_api.py::test_read_watermark_route - assert 503 == 201

FAILED ..\test\test_api.py::test_delete_document_route - assert 404 == 200

8 failed, 6 passed, 22 warnings in 20.22s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 48

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE + 13 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/NumberReplacer, occurrence: 49

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -435,7 +435,7 @@
                 # Extract salt from beginning of encrypted data
                 salt = encrypted_data[: self._SALT_SIZE]
                 nonce = encrypted_data[self._SALT_SIZE : self._SALT_SIZE + 12]
-                ciphertext = encrypted_data[self._SALT_SIZE + 12 :]
+                ciphertext = encrypted_data[self._SALT_SIZE + 11 :]
 
                 # Derive key using extracted salt
                 derived_key = self._derive_key(key, salt)

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.03s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/RemoveDecorator, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -82,8 +82,6 @@
     _SALT_SIZE: Final[int] = 16  # Salt size for key derivation
     _KEY_ITERATIONS: Final[int] = 100000  # PBKDF2 iterations
     _VERSION: Final[int] = 1  # Watermark format version
-
-    @staticmethod
     def get_usage() -> str:
         return (
             "Robust watermarking method using XMP metadata and distributed fragments. "

........F.....                                                           [100%]

================================== FAILURES ===================================

_____________________ test_get_watermarking_methods_route _____________________



client = <FlaskClient <Flask 'server'>>



    def test_get_watermarking_methods_route(client):

        """Test get watermarking methods endpoint."""

>       resp = client.get("/api/get-watermarking-methods")

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:297: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1162: in get

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



    @app.get("/api/get-watermarking-methods")

    def get_watermarking_methods():

        methods = []

    

        for m in WMUtils.METHODS:

            methods.append(

>               {"name": m, "description": WMUtils.get_method(m).get_usage()}

                                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

            )

E           TypeError: RobustXmpWatermark.get_usage() takes 0 positional arguments but 1 was given



server.py:1137: TypeError

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_get_watermarking_methods_route - TypeError: ...

1 failed, 13 passed, 22 warnings in 21.12s

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.KILLED

operator: core/ZeroIterationForLoop, occurrence: 0

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -325,7 +325,7 @@
         fragment_size = len(payload_bytes) // self._FRAGMENT_COUNT + 1
         fragments = []
 
-        for i in range(self._FRAGMENT_COUNT):
+        for i in []:
             start = i * fragment_size
             end = min(start + fragment_size, len(payload_bytes))
             fragment = payload_bytes[start:end]

...F.....F...F                                                           [100%]

================================== FAILURES ===================================

_________________________ test_upload_document_route __________________________



client = <FlaskClient <Flask 'server'>>



    def test_upload_document_route(client):

        """Test document upload endpoint."""

        file_path = script_dir / "storage" / "files" / "username" / "input.pdf"

        #open dummy file

        with open(file_path, "rb") as f:

            parameters = {

                "file": (f, "input.pdf"),

                "name": "My File"

            }

    

            resp = client.post("/api/upload-document", data=parameters, content_type='multipart/form-data')

            resp_data = resp.get_json()

    

            #tests when fully functional

            #basic tests

            assert resp.status_code == 201

            assert resp.is_json

            #check types

            assert isinstance(resp_data.get("id"), int) #was string! Specification is wrong.

            assert isinstance(resp_data.get("name"), str)

            assert isinstance(resp_data.get("creation"), str) and datetime.fromisoformat(resp_data.get("creation"))

            assert isinstance(resp_data.get("sha256"), str)

            assert isinstance(resp_data.get("size"), int)

            #check value

            assert resp_data.get("name") == parameters["name"]

    

        #Test with missing file

        resp = client.post("/api/upload-document")

        assert resp.status_code == 400

    

        #Test with too big file, 51 Mb

        content = b"%PDF-1.4\n" + b"0" * (50 * 1024 * 1024 + 1)  # 50MB + 1 byte

        stream = BytesIO(content)

        file_storage = FileStorage(stream=stream, filename="bigfile.pdf", content_type="application/pdf")

    

        #Need to patch the content length, not included in flask test server

        with patch.object(FileStorage, 'content_length', new_callable=PropertyMock) as mock_content_length:

            mock_content_length.return_value = len(content)

    

            data = {

                'file': (file_storage.stream, file_storage.filename, file_storage.content_type),

                'name': 'My Big File'

            }

>           resp = client.post("/api/upload-document", data=data, content_type='multipart/form-data')

                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



..\test\test_api.py:180: 

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1167: in post

    return self.open(*args, **kw)

           ^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\testing.py:235: in open

    response = super().open(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1116: in open

    response_parts = self.run_wsgi_app(request.environ, buffered=buffered)

                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:988: in run_wsgi_app

    rv = run_wsgi_app(self.application, environ, buffered=buffered)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\test.py:1264: in run_wsgi_app

    app_rv = app(environ, start_response)

             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1536: in __call__

    return self.wsgi_app(environ, start_response)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1514: in wsgi_app

    response = self.handle_exception(e)

               ^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:1511: in wsgi_app

    response = self.full_dispatch_request()

               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:919: in full_dispatch_request

    rv = self.handle_user_exception(e)

         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:917: in full_dispatch_request

    rv = self.dispatch_request()

         ^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\app.py:902: in dispatch_request

    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

server.py:103: in wrapper

    return f(*args, **kwargs)

           ^^^^^^^^^^^^^^^^^^

server.py:301: in upload_document

    if "file" not in request.files:

                     ^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\utils.py:107: in __get__

    value = self.fget(obj)  # type: ignore

            ^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:497: in files

    self._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\flask\wrappers.py:198: in _load_form_data

    super()._load_form_data()

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\wrappers\request.py:271: in _load_form_data

    data = parser.parse(

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:242: in parse

    return parse_func(stream, mimetype, content_length, options)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:267: in _parse_multipart

    form, files = parser.parse(stream, boundary, content_length)

                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\werkzeug\formparser.py:391: in parse

    _write(event.data)

C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:830: in write

    rv = file.write(s)

         ^^^^^^^^^^^^^

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



args = (b'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',)

kwargs = {}



    @_functools.wraps(func)

    def func_wrapper(*args, **kwargs):

>       return func(*args, **kwargs)

               ^^^^^^^^^^^^^^^^^^^^^

E       OSError: [Errno 28] No space left on device



C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\tempfile.py:483: OSError

------------------------------ Captured log call ------------------------------

WARNING  server:server.py:303 Upload attempt missing 'file' field

_________________________ test_create_watermark_route _________________________



client = <FlaskClient <Flask 'server'>>



    def test_create_watermark_route(client):

        """Test create watermark endpoint."""

        parameters = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                        "secret": "secret", "intended_for":"Mickey Mouse", "id": 1}

        parameters_no_id = {"method": "robust-xmp", "position": "metadata-only", "key": "key",

                            "secret": "secret", "intended_for":"Mickey Mouse"}

        resp = client.post("/api/create-watermark", json=parameters)

        #resp = client.post("/apicreate-watermark/1", json=parameters_no_id)

        data = resp.get_json()

    

        #basic tests

>       assert resp.status_code == 201

E       assert 500 == 201

E        +  where 500 = <WrapperTestResponse 45 bytes [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:322: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:server.py:1056 Failed to write watermarked file C:\Users\franc\Documents\GitHub\softsec-tatou\server\src\storage\files\username\watermarks\My File__Mickey_Mouse.pdf for document 1: [Errno 28] No space left on device

_____________________________ test_rmap_get_link ______________________________



client = <FlaskClient <Flask 'server'>>



    def test_rmap_get_link(client):

        # Step 0: Create RMAP service user to assign document to

        resp = client.post("/api/create-user", json={

            "login": "rmap_service",

            "password": "password_rmap",

            "email": "service@rmap.su",

        })  # pragma: allowlist secret

        # Step 1: Initiate RMAP to get nonceServer

        test_nonce = 12345678

        test_identity = "Group_13"

    

        encrypted_payload = encrypt_payload_for_server({

            "nonceClient": test_nonce,

            "identity": test_identity

        })

    

        response = client.post("/api/rmap-initiate", json={"payload": encrypted_payload})

        assert response.status_code == 200

        json_data = response.get_json()

        assert "payload" in json_data

    

        # Decrypt response to get the actual nonceServer

        decrypted = decrypt_server_response(

            json_data["payload"],

            client_privkey_path=str(Path(__file__).parent.parent / "client_keys" / "group13-private.asc"),

            passphrase=os.environ.get("PRIVKEY_PASSPHRASE", "")

        )

        nonce_server = decrypted["nonceServer"]

    

        # Step 2: Use that nonceServer in the rmap-get-link call

        encrypted_payload = encrypt_payload_for_server({

            "nonceServer": nonce_server

        })

    

        response = client.post("/api/rmap-get-link", json={"payload": encrypted_payload})

>       assert response.status_code == 200

E       assert 500 == 200

E        +  where 500 = <WrapperTestResponse streamed [500 INTERNAL SERVER ERROR]>.status_code



..\test\test_api.py:571: AssertionError

------------------------------ Captured log call ------------------------------

ERROR    server:rmap_handler.py:352 Failed to create watermarked PDF for session 0000000000bc614e4b5060e8fe793c10: [Errno 28] No space left on device

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

=========================== short test summary info ===========================

FAILED ..\test\test_api.py::test_upload_document_route - OSError: [Errno 28] ...

FAILED ..\test\test_api.py::test_create_watermark_route - assert 500 == 201

FAILED ..\test\test_api.py::test_rmap_get_link - assert 500 == 200

3 failed, 11 passed, 22 warnings in 20.21s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 1

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -332,7 +332,7 @@
             fragments.append(fragment)
 
         # Add fragments to PDF as annotations or form fields
-        for _i, fragment in enumerate(fragments):
+        for _i, fragment in []:
             try:
                 if doc.page_count > 0:
                     page = doc.load_page(0)  # Use first page

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.18s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 2

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -393,7 +393,7 @@
             fragments = {}
 
             # Look for annotations with our fragment pattern
-            for page_num in range(min(doc.page_count, 5)):  # Check first few pages only
+            for page_num in []:  # Check first few pages only
                 page = doc.load_page(page_num)
                 annots = page.annots()

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.40s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 3

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -397,7 +397,7 @@
                 page = doc.load_page(page_num)
                 annots = page.annots()
 
-                for annot in annots:
+                for annot in []:
                     try:
                         content = annot.info.get("content", "")
                         author = annot.info.get("title", "")  # Sometimes title is used

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.31s

SURVIVED

worker outcome: WorkerOutcome.NORMAL

test outcome: TestOutcome.SURVIVED

operator: core/ZeroIterationForLoop, occurrence: 4

--- mutation diff ---
--- arobust_xmp_watermark.py
+++ brobust_xmp_watermark.py
@@ -417,7 +417,7 @@
             # Reconstruct payload from fragments
             if len(fragments) >= self._MIN_FRAGMENTS:
                 reconstructed = b""
-                for i in sorted(fragments.keys()):
+                for i in []:
                     reconstructed += fragments[i]
                 return reconstructed.decode("utf-8")

..............                                                           [100%]

============================== warnings summary ===============================

..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:5: DeprecationWarning: 'imghdr' is deprecated and slated for removal in Python 3.13

    import imghdr



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyPacked has no __module__ attribute



<frozen importlib._bootstrap>:488

<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type SwigPyObject has no __module__ attribute



<frozen importlib._bootstrap>:488

  <frozen importlib._bootstrap>:488: DeprecationWarning: builtin type swigvarlink has no __module__ attribute



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\PyPDF2\__init__.py:21: DeprecationWarning: PyPDF2 is deprecated. Please move to the pypdf library instead.

    warnings.warn(



..\..\..\..\..\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: 1 warning

test/test_api.py: 14 warnings

  C:\Users\franc\AppData\Local\Programs\Python\Python312\Lib\site-packages\pgpy\constants.py:193: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.

    SymmetricKeyAlgorithm.TripleDES: algorithms.TripleDES,



-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html

14 passed, 22 warnings in 20.19s

Cosmic Ray Report

Summary info

Job list